Force new user to change password at the first login

[seek78]

Hi, it will be useful to have a setting that force new users to change password at first login.

[valadas]

This feature exists, after creating the user, you can go to the user setting and click on [Force Password Change] link.

[seek78]

What I meant was for automatic for newly created users, not manually as you indicated.

[valadas]

Oh, I misunderstood, reopening this for further discussion

[valadas]

If this gets done, it would be cool to also have an option to force password resets every x days...

[sleupold]

If this gets done, it would be cool to also have an option to force password resets every x days...

frequent password changes are no longer suggested by security experts (and Microsoft)

[bdukes]

I agree with Sebastian that it's not a recommended configuration, but we do support that feature, @valadas (under Security, Member Accounts tab, Member Management sub-tab)

@seek78 are you thinking of a toggle when creating a user (just like you can select Random Password you could select Force Password Change? Or just a higher-level policy that would always force the password change without a choice?

You could do this yourself by implementing IUserEventHandlers to handle the UserCreated event.

[valadas]

OMG, I actually used that feature in the past and totally forgot it existed...

[seek78]

I agree with Sebastian that it's not a recommended configuration, but we do support that feature, @valadas (under Security, Member Accounts tab, Member Management sub-tab)

@seek78 are you thinking of a toggle when creating a user (just like you can select Random Password you could select Force Password Change? Or just a higher-level policy that would always force the password change without a choice?

You could do this yourself by implementing IUserEventHandlers to handle the UserCreated event.

Hi, the first one: a toggle that force the password change at first access of users. Better if this setting is at portal level.

Thanks

[stale[bot]]

We have detected this issue has not had any activity during the last 90 days. That could mean this issue is no longer relevant and/or nobody has found the necessary time to address the issue. We are trying to keep the list of open issues limited to those issues that are relevant to the majority and to close the ones that have become 'stale' (inactive). If no further activity is detected within the next 14 days, the issue will be closed automatically. If new comments are are posted and/or a solution (pull request) is submitted for review that references this issue, the issue will not be closed. Closed issues can be reopened at any time in the future. Please remember those participating in this open source project are volunteers trying to help others and creating a better DNN Platform for all. Thank you for your continued involvement and contributions!