Users prompted change domain passwords