Your network contains an Active Directory forest named contoso.com. The forest contains a single
domain. The domain contains two domain controllers named DC1 and DC2 that run Windows Server
2012 R2.
The domain contains a user named User1 and a global security group named Group1.
You need to prevent User1 from changing his password. The solution must minimize administrative
effort.
Which cmdlet should you run?
A.
Add-AdPrincipalGroupMembership
B.
Install-AddsDomainController
C.
Install-WindowsFeature
D.
Install-AddsDomain
E.
Rename-AdObject
F.
Set-AdAccountControl
G.
Set-AdGroup
H.
Set-User
Explanation:
The Set-ADAccountControlcmdlet modifies the user account control (UAC) values for an Active
Directory user or computer account. UAC values are represented by cmdlet parameters.
CannotChangePassword
Modifies the ability of an account to change its password. To disallow password change by the
account set this to $true. This parameter changes the Boolean value of the CannotChangePassword
property of an account.
The following example shows how to specify the PasswordCannotChange parameter.
-CannotChangePassword $false
References:
http://technet.microsoft.com/en-us/library/ee617249.aspx
http://technet.microsoft.com/en-us/library/hh974723.aspx
http://technet.microsoft.com/en-us/library/hh974722.aspx
open the properties of an account that has the ability to change password ie “user cannot change password” checkbox is not selected
now run the powershell command
PS>Set-ADAccountcontrol -Identity [accountname] -CannotChangePassword $True
Now check the properties of the account again and you will see that powershell command has enabled the “user cannot change password” option
https://technet.microsoft.com/en-us/library/ee617249.aspx
0
0
Hello, i think that i saw you visited my site so i got here to go back the want?.I am trying to to find issues to enhance my website!I suppose its good enough to make use of some of your ideas!!|
0
0