1
Force Password Change At Next Login
Idea shared by Curtis Kropar www.HawaiianHope.org - 6/10/2024 at 1:37 PM
Proposed
SmarterMail 8797 :
Is this accurate ?  The only place to force a user to change their password at next login, is when you are first creating the email account ?  Yesterday I created 32 email accounts for a client. Then I clicked on "expire password" on all of them thinking *(I ASSuMEd)* That it was the same as force a password change on next login.

Nope...  This morning I had to go and reset passwords on all 32 accounts.

Is there a way / place to force a password change on the next login at some other location ? If so where, I could not find it..  If not, then that is my suggestion is that there are like 7 places to expire a password, there needs to be similar ways to force a password change on the next login.

www.HawaiianHope.org - Providing technology services to non profit organizations, low income families, homeless shelters, clean and sober houses and prisoner reentry programs. Since 2015, We have refurbished over 11,000 Computers !

2 Replies

Reply to Thread
0
Kyle Kerst Replied
Employee Post
Hi Curtis, long time no talk! :-) I did a quick test on this by expiring my own password but found it did force me to change the password when I next logged on. Do you know if the affected users leverage Remember Me so they don't have to log in each time? If so, and you're running an older build, this might be already corrected in a newer build as we did have a known issue around that a while back.
Kyle Kerst System/Network Administrator SmarterTools Inc. (877) 357-6278 www.smartertools.com
1
HI. I think you might have misread the post. - Or maybe it works differently for a new account, or maybe it is a time sensitive setting ? (Build number 8797 , at the top of the post)
Friday, I created 32 new accounts. I personally logged into all of them to set up the "connectivity" and retrieve their email from the old provider. The end user never had access to the login prior and never tried to log in till Monday.

So, Just for clarity, the EXPECTED behavior of the "expire" option in all like, 9 places I see it, is that it still supposed to allow a 1 time login after "expire" and then force a password change ?

Ok, I just tested it again and got the same result. I can replicate it every time.
1) Be logged in as the domain admin
2) Create a new account "testtesttest" and give it a password : "BubbaGump123!"
3) log out as domain admin and log into the test account. Success !
4) It will ask you to set the time zone, do that then log out.
5) log back in as domain admin, go to domain settings.
6) find the testtesttest email account, tick the selection box and then go up to the top and "expire password" with the 3 dot menu.
7) log out of the domain admin and try to log back in as the test account.
8) I can not log in. I get a failure with this message : 
I just did these steps 2 more times with the same results. Might need to have devs verify all locations of the "expire" function are doing the same thing.


www.HawaiianHope.org - Providing technology services to non profit organizations, low income families, homeless shelters, clean and sober houses and prisoner reentry programs. Since 2015, We have refurbished over 11,000 Computers !

Reply to Thread