Powershell - Set-Msoluserpassword

satanicguardian · 13 Jun 2013 at 09:11

Hey guys, random question - I normally use powershell to administer my company's office 365 subscription. One thing I've never understood however, is why when I set a password, as soon as the user logs in, it asks them to change it, am I missing a cmdlet? For example:

Set-MsolUserPassword -UserPrincipleName [email protected] -NewPassword "Password@12"

That changes the password, but the user logs into the portal and it asks them to change it, can someone assist?

Uhtred · 13 Jun 2013 at 10:42

Why would you want to be in a position where you know other people's passwords?!

satanicguardian · 13 Jun 2013 at 10:59

Uhtred said:
Why would you want to be in a position where you know other people's passwords?!

I'm global admin, and most of them are useless and forget their passwords every day - it's easier just to know, trust me!

Uhtred · 13 Jun 2013 at 11:16

It's in our global policy that we must not know any user passwords for our protection

Set-MsolUserPassword -ObjectId <Guid> [-ForceChangePassword <Boolean>] [-NewPassword <string>] [-TenantId <Guid>] [<CommonParameters>]

satanicguardian · 13 Jun 2013 at 11:42

Uhtred said:
It's in our global policy that we must not know any user passwords for our protection

Set-MsolUserPassword -ObjectId <Guid> [-ForceChangePassword <Boolean>] [-NewPassword <string>] [-TenantId <Guid>] [<CommonParameters>]

Can you just use my example from above and create an example of this in use please?

Uhtred · 13 Jun 2013 at 11:54

I've never used it but I suspect it would be...

Set-MsolUserPassword -UserPrincipleName [email protected] -ForceChangePassword $false -NewPassword "Password@12"

satanicguardian · 13 Jun 2013 at 11:59

Thank youuuu

will that let me reuse old passwords do you know?

Uhtred · 13 Jun 2013 at 12:01

That sounds like password history which you can't override using the cmdlet

satanicguardian · 13 Jun 2013 at 12:04

You sir, are a scholar and a gentleman!

satanicguardian · 13 Jun 2013 at 12:05

And yes, you can reuse old passwords!

Saundie · 13 Jun 2013 at 15:03

Uhtred said:
That sounds like password history which you can't override using the cmdlet

Although it's purely academic, the password history only applies when the end user changes their own password - a password reset is different to a password change as far as the system is concerned. Yes, I'm being pedantic (sorry).

satanicguardian · 13 Jun 2013 at 16:28

Saundie said:
Although it's purely academic, the password history only applies when the end user changes their own password - a password reset is different to a password change as far as the system is concerned. Yes, I'm being pedantic (sorry).

My users are far to dopey to change their own passwords