When setting "passwordMustChange" to on and resetting a users password as an administrator, the users passwordExpirationTime will be set to 19700101000000Z. The user will then be prompted for a new password at first login. It seems that 19700101000000Z in passwordExpirationTime indicate that the user must change his password at next use.

 

How do I set that the user must change his password at first use, but if "first use" is after a year since adminstrator reset the password, the users password should have expired and been set to unusable ?

 

Regards Svein Otto Solem