Do you know of anything I can do for this scenario?
- Currently, remote users have a no-expiration password policy. I want to change this soon.
- I’m going to create a powershell script that determines who is expiring in 10 days, and emails them asking for them to reset their password.
- I will direct office workers to set the password on their machine using ctrl+alt+del
- I will direct remote workers to set the password through webmail
My problem is that remote users will still need to use their old credentials to get onto their computer, then use their new password in Outlook or on their phone.
I don’t want to give everyone VPN access to the network, and I cannot guarantee when they’ll be back in one of our offices to resync with Active Directory.
Does anyone know how I can resync their computer with AD WITHOUT granting VPN access so they're able to log in with their new credentials?