How to bulk allow users to change passwords through group policies?

Question

System administration

Good afternoon! There is a domain on the 2008 server. When a new user was created, he was forcibly forbidden to change his password in AD. But the situation has changed and now management wants users to keep track of their passwords. How would you massively distribute the permission to change passwords to everyone? I did not find it in the policy options. Maybe there is an option with a powershell?

Answer 1

Password policy is configured for domain controllers.
If you are talking about a checkbox in the AD account, then you can write a script on PS that will go through the accounts and change the password change prohibition parameter.