Hi all, I’m new administrator of company where almost all users have stupid default password like ‘changeme’!!!
And best thing is that I detected that users using web mail to read other messages (they just enter other’s name and default password)…!
Please how to best force all users to change their ID passwords immediately let’s say during next login?
Subject: How to force all users to change password at all and immediately?
Look in the person’s document
Look in the admin help for further details
JYR
Subject: RE: How to force all users to change password at all and immediately?
Hello Jean-Yves, I don’t wish to change internet password (option “Force users to change internet password on next login”) but Notes password (ID passphrase) on next login.
Subject: How to force all users to change password at all and immediately?
Setup a Policy and a Security Settigns doc.
Enable Password Checking in the Server docs
On the Person doc on the Admin Tab all the way at the bottom, “force user to change internet password on next login”
Subject: RE: How to force all users to change password at all and immediately?
Hello Paul, thank you for reply but set up policy will not help me (I’ve already tried it). Result is that account is locked out because when I set Enable password checking and set Password expiration period to any value and Domino will compare this value with date in "Last password change " (field $dspPasswordChangeDate on Person Doc) most of users will be locked out because they never changed password before.
But you recommend to enable “Force users to change inter password on next login” but I don’t wish to change ID password…
Subject: RE: How to force all users to change password at all and immediately?
I’ve never seen that problem!
I’m not saying that you’re not having it, just saying that I’ve been running a security policy since mid 2005 (Domino 6.5.4) to do just what you’re asking for.
Oh, I’m actually using a Security Policy document, not setting the fields in the person document. Much easier to manage.
My Security Document settings are as follows:
Use Custom Password Policy for Notes Clients No
Check password on Notes id file Yes
Allow Users to Change Internet Password over HTTP Yes
Update Internet Password When Notes Client Password Changes Yes
Enable Notes Single Logon with Workplace Rich Client: No
I think that the reason everyone keeps advising you to force the internet password change, is only to prevent unauthorized users from continuing to access someone else’s mail.
Subject: RE: How to force all users to change password at all and immediately?
I simply would like to know if there is any way to request users to change their Notes ID password (not internet password) at all?
My situation is very clear: hundreds users have default password like ‘changeme’ and they know that fact and reads other’s mail etc…
Thanks
Subject: RE: How to force all users to change password at all and immediately?
No, you can’t easily force everyone to change their Notes password right now. Your only option is to use a security policy and set a password expiration interval. You could make it extremely short, like 15 days, then disable it, and also use a policy to force people to change their password when they first log in.
Subject: RE: How to force all users to change password at all and immediately?
Thank you Charles. You are first who understand me 
And resume of my issue is write simple agent change last password change field to e.g. today, set e.g. 30 days as Password Expiration Period and enable policy with this security settings.
Otherwise wihout manually updating last password change date will result to locked out IDs (password was not changed longer than 30 days + grace period => locked out).
I must say that Domino is great but sometimes very silly…
Subject: RE: How to force all users to change password at all and immediately?
Run an agent to set the $dspPasswordChangeDate date on ALL person docs.
So, if your policy is going to be every thirty days, set it to 25 days ago and then enable your policy. Everyone will have to change their password at the same time.
Subject: RE: How to force all users to change password at all and immediately?
just clear the http password field in the person doc and tell everyone they will need to set a new password. You can also write a little application to use as your new home page which presents the user with a Change Password page the next time they log onto the server. I think there’s a couple of sample databases to do this in the Sandbox or on openntf.org