Sun Java System Identity Synchronization for Windows 6.0 Installation and Configuration Guide

Using the forcepwchg Migration Utility

Users who change their passwords during migration will have different password in Windows NT and the Directory Server. You can use the forcepwchg utility to require a password change for users who changed their passwords during the Identity Synchronization for Windows version 1.0 to version 6.0 migration process.

Note –

The forcepwchg utility ships with Windows packages only.

Before using forcepwchg you must verify the following:

ProcedureTo Execute the forcepwchg Command line Utility

  1. Open a Command Prompt window and cd to the Windows migration directory on the host where you are performing the migration. (The Identity Synchronization for Windows 1.0 NT components such as connector, Change Detector DLL, and Password Filter DLL must be installed on the PDC host.)

  2. From themigration directory, type

    java -jar forcepwchg.jar [-n] [-a] [-t <

    For example,

    forcepwchg.jar -n -a forcepwchg.jar -t 33m

    Using the forcepwchg Migration Utility describes the arguments that are unique to forcepwchg:




    Specifies preview mode. In the preview mode, the utility prints out the names of all normal users except:

    • Built-in accounts (Administrator and Guest) if you specify the -a argument.

    • Users who changed passwords during the time specified using the -t argument.

      In preview mode, any user can execute forcepwchg. In non-preview mode, only the Administrator can execute forcepwchg.


    Requires all users (except Administrator and Guest) to change their passwords. You cannot use this argument if you are using the -t argument.

    -t time_specification

    Forces all users who changed passwords in the past time specification to change their passwords. Where time specification can have the following form:

    • number: Number of seconds (for example, -t 30)

    • number m: Number of minutes (for example, -t 25m)

    • number h: Number of hours (for example, -t 6h)

      For example, if you specify forcepwchg -t 6h, all users who changed passwords within the last six hours will be required to change their password again.


    Prints out usage information.