Prevent users from changing passwords

[Tony Nelson]

Hello all,

I would like to know if it's possible to lock a user's password so they can't change it.  We are running into issues with students changing their google passwords then forgetting what they changed it to.  I know how to change a user's password using gam but I'd also like to loc it down so the user can't change it.

Thank you

Anthony "Tony" Nelson

Director of Information Security, Systems, and Infrastructure

The Howard School

1192 Foster St. NW

Atlanta, Georgia 30318

T 404.377.7436 x / F 404.377.0884

[Maj. Marshall Giguere]

> gam update user us...@example.com password "password"

AFAIK there is no way to lock a password, but I could be wrong.

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/CAB39OY2xBKveLG5ciNwf-2zesMCFk5g3j3kD5Mq1-toX1YbPUw%40mail.gmail.com.

[Bassel Massamiri]

Hi Tony,

You can do that by following the steps below:

In the admin Console go to the settings under: Security > SSO with third-party IDPs > Legacy SSO profile.  

We do that through Security>SSO with third-party IDPs>Legacy SSO profile

Please configure the following:

• Sign-in Page URL: https://mail.google.com/mail/u/0/#inbox
• Sign-out Page URL: https://accounts.google.com/logout
• Network Mask: 0.0.0.0/32
• Change Password URL: For this, you'll need to build an internal Google Site. This site should display the message you want your end-users to see when they click the "change password" link. Use the URL of this Google Site.

 Once configured, you can assign and test the profile by:

1. Going to: Security > SSO with third-party IDPs > Manage SSO profile assignments.
2. Applying the "Legacy SSO profile" to a specific OU or Group for testing purposes.

I hope this helps.

Regards,

--