Use the Active Directory Force Password Change remediation action to force a user to change their compromised password upon their next attempt to authenticate against the domain controller.In the current Beta version, the SOAR remediation actions are provided as scripts, per customer request. For more information, contact Cynet.You must store your privileged user credentials in the Security Vault before creating a new Custom Remediation action. This user must have delegated control over the OU on which you are operating. In the newly created vault object:For name and key enter: AD Domain Controller Activate the vault object and enable agent remediation Add the following variables:NameKeyValueUserUserYour privileged username. The required format is domain\\username.PasswordPasswordYour privileged user passwordNow you must create a new Custom Remediation action to run on an execution server connected to AD using the following parameters:FieldValueAction NameAD Force Change PasswordRemediation CategoryUserExecution LocationExecution ServerFile for ExecutionUpload the script you received from CynetArguments for ExecutionSee belowArgumentsYou must enter all the arguments, in the order in which they appear TypeArgumentPrefixVaultAD Domain Controller.User-usernameVaultAD Domain Controller.Password-passwordDynamicUser Name-userStaticDomain Name-fulldnArgumentDescriptionAD Domain Controller.UserPrivileged user usernameAD Domain Controller.PasswordPrivileged user passwordUser NameUser on which to enforce Change PasswordDomain NameThe full name of the domain server in the format: ..