需求：將指定OU的用戶屬性中“下次登陸時更改密碼”啟用。該選項啟用後用戶的密碼即過期。

#Subject: Get the passwordexpired Property of the users and Set ChangePasswordAtLogon to yes.
#Date:2017/05/26
Import-Module ActiveDirectory
# 0 is Disable ChangePasswordAtLogon
# 1 is Enable ChangePasswordAtLogon

$Myou="OU=testou,OU=MY_USER,OU=Beijing,DC=CCTV,DC=China"

Get-ADUser -SearchBase "$Myou" -Filter *  -Properties * | select Name,PasswordExpired,sAMAccountName | ForEach-Object { Set-ADUser  -identity $_.sAMAccountName -ChangePasswordAtLogon 1 }

本文出自 “工作備忘錄” 博客，請務必保留此出處http://michael2017.blog.51cto.com/151632/1931524

Powershell變更AD用戶的屬性