In this article, I’ll show you how to disable the password never expires flag for multiple Active Directory users. If you have done an audit of your AD user accounts, you may have several accounts like the screenshot below.
Accounts with the “Password never expires” option enabled is a security nightmare. If you have several accounts with this enabled, you can bulk disable the settings with the AD Pro Toolkit.
Step 1. List users in CSV file
List the accounts by sAMAccountName in a csv file like below.
Refer to the article list users with password never expires to find all users that have this flag enabled.
Step 2. Open the AD Pro Toolkit
Click on “Bulk Modify Users
Step 3. Select your csv file
Click browse to select your csv file.
Click update options and select “False” for “Password Never Expires“
Click “Ok”.
Click “Run” to start the update.
You can see in the screenshot above, I just updated 16 users. You can verify the changes by running the password set to never expire report.
Based on the report below I can confirm the accounts from my csv no longer have the password never expire flag enabled.
Summary of Steps
In this article, I showed you how to disable the password never expires flag for multiple Active Directory users.
- List the accounts by sAMAccountName in a csv file. These are the accounts that you want to update.
- Open the AD Pro Toolkit and open the bulk modify users tool
- Select your CSV file
- Click on update options and set password never expires to false
- Click “Run” to start the update
- Verify the password never expires flag is disabled by running the “Users with password set to never expire” report.
Download a 14 day free trial of the AD Pro Toolkit and see how easy it is to Manage and Report on Active Directory.