change Password

Question

change Password

NOR AZAH JUSOH 0

I've already bulk-created 4,000 new users through Microsoft Entra, and the process was successful. All users were created with the same default password.

Now, I want to require all 4,000 users to change their password when they log in for the first time. However, I'm not sure how to configure this for all 4,000 users at once.

Could anyone guide me on how to set this up in bulk?

Thank you in advance.

0 comments

1 answer

Your answer

Answer 1

Hello NOR AZAH JUSOH,

Bulk create doesn't mark the CSV password as temporary - I tested it in my lab: bulk-created user signs in with the initial password without being asked to change it, and the template has no column for it. You can set the flag afterwards with Microsoft Graph PowerShell, reusing the same CSV you used for the upload / creation:

Connect-MgGraph -Scopes "User-PasswordProfile.ReadWrite.All"
Import-Csv "C:\path\to\your-bulk-create-file.csv" | ForEach-Object {
    Update-MgUser -UserId $_.'User name [userPrincipalName] Required' -PasswordProfile @{ ForceChangePasswordNextSignIn = $true }
}
Disconnect-MgGraph

This small script sets the flag forceChangePasswordNextSignIn to true that means the user needs to change the password on the next sign-in - I would test it with one user first and then you can proceed with the full list.

you can also read this: "User-PasswordProfile.ReadWrite.All is the least privileged permission to update the passwordProfile property." here

Best Regards

Alex