Migrating passwords with ADMT 2.0 without forcing a password chang

Discussion in 'Active Directory' started by AI, Jul 22, 2005.

  1. AI

    AI Guest

    I am doing some test runs with ADMT 2.0, migrating accounts from an NT 4.0
    domain to Windows 2003, and I'm having some trouble with the password
    migration feature. After the account has been migrated, the user is able to
    log on to the new domain with the old password, but the "Your password has
    expired and must be changed" message pops up. Based on the documentation, a
    password change is required after the account and password have been migrated
    only if the old password does not meet the length and complexity requirements
    of the new domain. Here is the passage from the ADMT 2.0 help file:

    "ADMT cannot verify password policies in the target domain. If the source
    user accounts have passwords that violate the password restrictions (such as
    minimum length) in the target, then the affected migrated accounts can log
    on, but they will be forced to change their password the next time they log
    on."

    However, this appears to happen even if the old password meets all
    requirements (I have the complexity filter enabled, and the minimum length is
    7).

    For example, I set the password for one of my test accounts to [email protected] in
    the NT4 domain, and after migrating the account to AD, I was able to log on
    with this password, but was forced to change it. There is no problem setting
    this password for accounts that already exist in the AD domain. This is a
    new account with a new password, so password age limits don't apply, and I
    unchecked the "User must change password at next logon" option when I created
    the account in the NT4 domain.

    So, is this passage misleading, citing circumstances under which a password
    change is forced when in fact a password change is always forced, or is there
    a way to allow users to keep their existing passwords until they reach the
    age limit?
     
    AI, Jul 22, 2005
    #1
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.