Unfortunately I need to mass change passwords of 200+ users to avoid a security problem.

What would be the best approach to

1. Prevent login of these users with their old passwords.
2. Generating and assigning new passwords to them
3. Sending out emails to them with their new passwords.

I am aware of the password reset function but for this I would first get the emails for every user and then enter them one by one manually into the form. Quite time consuming for 200+ users.
So I am looking for a quick (and dirty?) solution.

Post edited by: krileon, at: 2010/07/16 21:11

Thanks for your reply. I did it this way:
I edited the corefiles, so no email was necessary. Then I entered every username by hand into the password reset function. It took a while but it worked.

However may I suggest a better handling for CB 2.0. Let´s imagine cases where user accounts got abused due to weak passwords. There should be several ways for admin to handle such cases from the backend:

1. The coolest feature would be a password generator, where admin can specify for which users to generate new passwords. Also password length and stuff. Also if users will get informed by email. Click ok and there it goes.

2. From the backend admin should be able to resubmit the welcome email and simply change the password of a user by typing it into the password field and decide wether to send out an information email or not.