Configure the Active Directory domain security policy (Security Settings >> Account Policies >> Password Policiy >> Maximum password age), to expire passwords after a given time (e.g., 7 days). Make sure you use gpupdate to propage security policy changes to all domain controllers (including the local one). Create or edit a user in Active Directory and set a new password for her, and make sure the password is configured to expire. Configure Moodle to use that Active Directory as it's LDAP server (see instructions at http://docs.moodle.org/en/LDAP_authentication ) While configuring the LDAP server settings, make sure you enable password expiration (set it to 'LDAP') and set expiration warning to a sensible value (e.g., 5 days). Log in with the Active Directory user created/modified above. Nothing should be notified to the user. Now log out. Change the date in the Moodle Server to make the password be in the 'warning period' or simply wait enough time until we reach it Log in again with the same user. A message should be printed telling the user the password is expiring in X days and offering her to change it (if possible from within moodle).