Problem with "The user's password must be changed before signing in" Intune

Question

Hi

We have applied Security Baseline for Windows with the Device Lock setting enabled. So this provoke that when we want to log with our local admin user it show a prompt saying "The user's password must be changed before signing in". We have more than 100 devices with this problem so we need to find a solution for deploy in all the devices.

We try to disable the Device Lock policy but this does not solve the "The user's password must be changed before signing in" issue

We try to deploy a powershell script to disable the flag but we get a error "EAS Policy requires password change"

Could we do anything to solve this?

Thanks you,

Regards.

Answer 1

@Alejandro Miranda, Thanks for the reply. For the prompt "The user's password must be changed before signing in", it seems the "User must change password at next logon" is enabled.

Based on my test, we need to change the user password before we unselect "User must change password at next logon". You can add the PowerShell commands in the script to firstly change the local user password before we disable the setting. here is a link with detailed commands for your reference.

https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.localaccounts/set-localuser?view=powershell-5.1#example-2-change-the-password-on-an-account

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

I had successfully enabled or disabled this flag in the past, refer to the post for the scripts you can use to manage this setting: https://cloudinfra.net/enable-disable-user-must-change-password-at-next-logon-using-intune/.

---If the response is helpful, please click "Accept Answer" and upvote it.---

Answer 3

Hi!

That is the script I used and I get an error message saying "Exception calling “setInfo” with “0” argument(s): “Logon Failure: EAS policy requires that the user change their password before this operation can be performed. “"