Force all users to reset pws -every 30days?

418 views
Skip to first unread message

C. M. Williams

unread,
Dec 8, 2015, 4:45:49 PM12/8/15
to Google Apps Manager
Hi,

What are the commands and whole process to force all users in the domain to reset pws every 30 days or so?

Thans

SHAN

unread,
Dec 10, 2015, 6:14:19 AM12/10/15
to Google Apps Manager
Hi Williams,
There is no such commands wherein you can parameterize to change password after 30 day but you can always bulk reset the password at one go, i recently did for 2000 users.
Put four columns in you spreadsheet 1. Email address 2. password 3. GAM command 4. Bulk formule (= A1,B1,C1)[drag for rest of your 1999 users and put it in command line).This will force the user to change the password at next login.

Lemme know if it works :)

BR,
Shan

Brian Gray

unread,
Dec 10, 2015, 9:01:56 AM12/10/15
to Google Apps Manager


On Tuesday, December 8, 2015 at 3:45:49 PM UTC-6, C. M. Williams wrote:

What are the commands and whole process to force all users in the domain to reset pws every 30 days or so?


If you want to reset passwords for some or all accounts, Vivek's response is correct.  If you want to require some or all users to change their own password on their next log-in, there is another option.  You can combine the GAM bulk operations options with the "update user" command.

Bulk operations: https://goo.gl/OXD4eu - bottom part of the section discusses shell pipes (the | symbol) used below  The examples also show how to apply the command to users in a specific OU (or other query options - https://goo.gl/WVefXt )

The "update user" command: https://goo.gl/GGHTyw - includes an option to require a pasword change on next log-in

This command will require all accounts to change to a new password on next sign-on:

gam print users | gam csv - gam update user ~primaryEmail changepassword on

Be careful when you do anything to "all" accounts.  That will include admin accounts, role accounts, etc.  If you want to apply the command just to your human users you probably want to use the query option on "gam print users" to act on smaller sub-sets of accounts in specific OUs.

Karl Hehr

unread,
Dec 10, 2015, 11:00:00 AM12/10/15
to google-ap...@googlegroups.com

If you take this command and write a BASH script you can CRON it to run every 30 days.

--
You received this message because you are subscribed to the Google Groups "Google Apps Manager" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-manager/5350d002-9dab-423d-b2aa-26d1d81617a1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Shantanu Das

unread,
Dec 14, 2015, 1:05:18 AM12/14/15
to google-ap...@googlegroups.com
Hi Brian,
gam update user <email add of user> password  'newpassword' 
If you want  to do it for bulk users, simply put dynamic values in your spreadsheet and in the third column write down the gam command.

Feel free to reach me for any clarification.



--
You received this message because you are subscribed to a topic in the Google Groups "Google Apps Manager" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/google-apps-manager/V4S06qtdS48/unsubscribe.
To unsubscribe from this group and all its topics, send an email to google-apps-man...@googlegroups.com.

To post to this group, send email to google-ap...@googlegroups.com.
Visit this group at http://groups.google.com/group/google-apps-manager.
Reply all
Reply to author
Forward
0 new messages