Users who change their passwords during migration will have different password in Windows NT and the Directory Server. You can use the forcepwchg utility to require a password change for users who changed their passwords during the Identity Synchronization for Windows version 1.0 to version 6.0 migration process.
The forcepwchg utility ships with Windows packages only.
Before using forcepwchg you must verify the following:
Be sure you do not configure the 7-bit check Plug-in in Directory Server to enforce 7-bit values for the userpassword attribute. Do this using the Directory Server console.
Be sure that the client you are using for authentication translates the value from your locale to UTF-8 correctly. (For example, the -i option for the ldapsearch shipped with Directory Server).
Open a Command Prompt window and cd to the Windows migration directory on the host where you are performing the migration. (The Identity Synchronization for Windows 1.0 NT components such as connector, Change Detector DLL, and Password Filter DLL must be installed on the PDC host.)
From themigration directory, type
java -jar forcepwchg.jar [-n] [-a] [-t < time_specification\>] |
forcepwchg.jar -n -a forcepwchg.jar -t 33m |
Using the forcepwchg Migration Utility describes the arguments that are unique to forcepwchg: