Windows 10: "User must change password at next logon" only works on the user's SECOND log on attempt

I have a fairly mundane network with AD servers six in total in three locations all running Windows Server 2022 Standard updated with the latest patches, etc. The network clients are majoritively Windows 11, with some still on Windows 10. The environment is hybrid, with workstation updates and policies handled through Intune, and Azure AD Connect syncing the local AD to Entra ID.Everything is working fine, but am experiencing an odd issue where, if I go into Active Directory Users and Computers and check the box for "user must change password at next logon," the user must actually log

:)

 

"User must change password at next logon" does not work

Hi,

I want to force Windows 10 Pro user to change his password at next logon. I wanted to do it using Computer Management -> Local Users and Groups -> Users. I clicked on user and opened Properties dialog, then I click on 'User must change password at next logon'
and OK. I tried it several times, but without success. User can still login with his old password and he is not asked to change password at logon. How can I force user to change his password at next logon?

Mentioned user account is linked with Microsoft account. Could this be reason why it does not work? If yes, is there a way how to to do it for Microsoft account?

Thanks,

Vlasto

 

Requesting user password change

Hi Robert, I'm Graeme, an independent adviser here to help.

What happens when you try to change the password? Does it work?

Is your PC part of a domain, perhaps your work network? If so, your network administrator must have set a time limit before your password expires and must be changed. You can go ahead and change the password.

Otherwise, if you're not part of a domain network, you might need to try booting into Safe Mode to see if it lets you log in, or log in as another user, then follow the steps in this link:

https://answers.microsoft.com/en-us/windows/for...

- Press Windows key + R, then type lusrmgr.msc and press Enter.

- Click on Users, right-click on your OEM administrator account and select Properties.

- Uncheck the box for User must change password at next logon. Click on Apply and OK to save changes.

Let me know how you go! Thanks!

 

The User’s password must be changed before signing in....

Hello David,

To better assist you with your concern, I'd like to know the following information:

• Confirm which build is currently installed on your device. To check, follow the steps below:

1. Press Windows key + R, then type in winver.
2. Click OK.

• Have you tried disabling the User must change password at next logon for your OEM administrator account? If not, refer to the steps below:

1. Press Windows key + R, then type lusrmgr.msc and press
   Enter.
2. Click on Users, right-click on your OEM administrator account and select
   Properties.
3. Uncheck the box for User must change password at next logon. Click on
   Apply and OK to save changes.

• It would be best if you can also send me a screenshot of the said issue.

Looking forward to your response.

Regards.