Score:0

How can I invalidate all user logins on Exchange across all browsers, devices and machines?

jp flag

I believe multiple of the user accounts on this exchange server to be compromised. I have already reset the user passwords of the affected accounts, but I want to be certain that any session that was authenticated using the old credentials is invalidated.

Exchange 2016 CU9 v15.1 Windows Server 2016 v1607

tsc_chazz avatar
vn flag
Considered restarting the various networking protocols used to access the mail server?
Stillkill avatar
jp flag
I have, but i am unsure if that's going to invalidate any kind of "remember me" tokens
Joy Zhang avatar
us flag
As far as I know, if you reset the password for users, the user will receive prompt credential and the users should enter the correct credentials. The previously cached credentials will expire and are no longer available
Score:0
tr flag

If you disable and re-enable the user again in Active Directory, any current sessions should be invalidated.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.