Today, I had a user txt me because he was out in the field and his password had expired on his Active Directory user account. We do not have a method for them to reset it from off-site (yet). So I needed to extend the expiration date on his password so he could use it until he can get in to update his password.

The best solution I could find was to set the pwdLastSet attribute on his Active Directory account to today’s date.