# Track changes for further processing

**URL:** <https://forum.ansible.com/t/track-changes-for-further-processing/36593>\
**Category:** Ansible Project\
**Created:** [May 4, 2022, 3:57pm UTC](https://forum.ansible.com/t/track-changes-for-further-processing/36593 "2022-05-04T15:57:44Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![schoeppi](https://avatars.discourse-cdn.com/v4/letter/s/76d3ee/32.png) [@schoeppi](https://forum.ansible.com/u/schoeppi)\
**Post date:** [May 4, 2022, 3:57pm UTC](https://forum.ansible.com/t/track-changes-for-further-processing/36593/1 "2022-05-04T15:57:44Z")

</div>

Hi,

I am using a slightly adapted role taken from  
\<[https://github.com/1it/ansible-role-users&gt](https://github.com/1it/ansible-role-users&gt); to manage our users on our  
servers.

This is working fine so far but one little thing I can't get to work.

I want to force newly created users to change their password when they login  
for the first time. For that reason I need to know which user is new on a  
system. They role itself does not give me this information so I need to find  
another way.

Have you any idea how to read out those new users?

How do you manage your users on your systems and what roles dou you use?

Kind regards and many thanks,

&nbsp;&nbsp;Schoepp

---

<div class="post-metadata">

**Author:** ![Michael\_Stroder](https://avatars.discourse-cdn.com/v4/letter/m/7ea924/32.png) [@Michael\_Stroder](https://forum.ansible.com/u/Michael_Stroder)\
**Post date:** [May 4, 2022, 7:58pm UTC](https://forum.ansible.com/t/track-changes-for-further-processing/36593/2 "2022-05-04T19:58:21Z")

</div>

Sorry, two answers you probably don't want to read:

1. While I really like ansible to achieve many tasks I don't consider it to be a decent IAM system. An ansible-based solution lacks important features like enforcing uniqueness on IDs, secure password reset process, etc. You should rather consider setting up a decent IAM.

2. Enforcing password reset after first login does not work well in a pure server environment. This mech is designed for workstation logins after initial password reset. I'd recommend to implement a better password reset process which avoids this.

Ciao, Michael.