Hi, Under the MS AD, the information „user must change password at next logon“ is reflected through three attributes: - the maxPwdAge attribute of the domain object, - the pwdLastSet of the user object - the userAccountControlof the user object 1) When the difference between the current date and pwdLastSet exceeds maxPwdAge, the password is expired, but nothing changes in AD. If you reset the password, please take care to update the pwdLastSet date. 2) there are complex relationships between the operations to update the password and the userAccountControlOf. This is detailed status encoded in the single bits of a 32-bit word along the following table: ADS_UF_SCRIPT = 1, // 0x1 ADS_UF_ACCOUNTDISABLE = 2, // 0x2 ADS_UF_HOMEDIR_REQUIRED = 8, // 0x8 ADS_UF_LOCKOUT = 16, // 0x10 ADS_UF_PASSWD_NOTREQD = 32, // 0x20 ADS_UF_PASSWD_CANT_CHANGE = 64, // 0x40 ADS_UF_ENCRYPTED_TEXT_PWD = 128, // 0x80 ADS_UF_TEMP_DUPLICATE_ACCOUNT = 256, // 0x100 ADS_UF_NORMAL_ACCOUNT = 512, // 0x200 ADS_UF_INTERDOMAIN_TRUST_ACCOUNT = 2048, // 0x800 ADS_UF_WORKSTATION_TRUST_ACCOUNT = 4096, // 0x1000 ADS_UF_SERVER_TRUST_ACCOUNT = 8192, // 0x2000 ADS_UF_DONT_EXPIRE_PASSWD = 65536, // 0x10000 ADS_UF_MNS_LOGON_ACCOUNT = 131072, // 0x20000 ADS_UF_SMARTCARD_REQUIRED = 262144, // 0x40000 ADS_UF_TRUSTED_FOR_DELEGATION = 524288, // 0x80000 ADS_UF_NOT_DELEGATED = 1048576, // 0x100000 ADS_UF_USE_DES_KEY_ONLY = 2097152, // 0x200000 ADS_UF_DONT_REQUIRE_PREAUTH = 4194304, // 0x400000 ADS_UF_PASSWORD_EXPIRED = 8388608, // 0x800000 ADS_UF_TRUSTED_AUTH_DELEGATION = 16777216, // 0x1000000 ADS_UF_PARTIAL_SECRETS_ACCOUNT = 67108864, // 0x4000000 You must take care of the bits „ADS_UF_PASSWD_CANT_CHANGE“, „ADS_UF_PASSWD_NOTREQD“, „ADS_UF_ENCRYPTED_TEXT_PWD“, „ADS_UF_DONT_EXPIRE_PASSWD“, „ADS_UF_PASSWORD_EXPIRED“. IF you maintain the password without using the native methods, you have to take care to update the pwdLastSet and reset the bit „ADS_UF_PASSWORD_EXPIRED“. For more information relate to the article under: http://www.jigsolving.com/activedirectory/user-account-attributes-part-5 Regards, Giovanni