A few weeks ago, while studying for my MCSA and fooling around with DS commands, I attempted to force myself to change my password. Instead of just me, i forced everyone in the domain to change their password(oops!) Well now it looks like This is going to happen every 30 days and I need to change it so that no-one is forced to change passwords. I really dont understand why this is happening. There is no GPO setup to force this and in AD users and computers I have made sure that the boxes that would normally have to be checked to force this are unchecked...The only thing I can think is that the DS command can only be reversed by another DS command?? I am obviously still pretty green, so any help would be appreciated!

What was the syntax you used? You sure you've checked the effective GPO's being applied? Holy Wow.

Thanks Jestible! After reading your post I double checked policy. I had forgotten that password policy is only enforced at the domain level. Checked the default domain policy and it was set to have password expire. One more question. My network admin says he didnt set that GPO. Do DS commands effect GP? I was under the impression that they only worked with AD? Could my DS command have caused a policy change? Oh and I cant remember exactly what syntax i used. I think it was: dsquery user, cn=,ou=,dc=,dc= mustchangepassword yes. only inseting my user info. My network admin says I prolly left out the ou so it effected the whole domain?

I don't understand why you wouldn't have a password expire policy enabled, even if it was set for 6 months it's still a good idea. I'm not sure the exact effects the DS command can play in with changing the GPO. I know I can refresh policies and so forth with the DS command but clueless beyond that. I've never really jumped into using it for more than inquires and searches. Holy Wow.