User setting not sticking

[Guest]

We have a particular user that when you set the "User Cannot Change Password" to true and save the settings, the next time you open the user it's set back to false.

If I open the AD U&C tool and set it to true, then open Hyena and look at the user, it's still set to false! Even though it's true on AD. I have tried synchronizing the domain too.

I am running V5.7. Has anyone else experienced problems like this in the past?

[cmccullough]

Re: User setting not sticking

Go into File->Manage Object View and click on this domain and let us know what you have set for Type.

Then right-click on a user that you shows differently and choose Account Functions->Shell Properties. How is it set on the Account tab?

Also, do you have delegated permissions for this?

[Guest]

Re: User setting not sticking

Hello,

I have the same problem. Microsoft "users and computers" works fine but on hyena property page "user can not change password" is always false.

We use:
Hyena 6.2 German
Server 2003 with Exchange 2003 German (all Updates) ...
AdminPC: XP-Prof German, with all Updates.
German Adminpac ....

Any Idea?
Best Regards

[cmccullough]

Re: User setting not sticking

Send some screen shots showing this to [email protected]. Also go to File->Manage Object View and click on your domain and send a shot of that so we can see how yo have it configured.

[kstanush]

Re: User setting not sticking

Right click on this user and select Listing Views->User (All). On the resulting display, see what the value is for the attribute named 'useraccountcontrol', and post the value here.

[Guest]

Re: User setting not sticking

hello,

very fast response. thanks.

i send the screen to support@ ...

Here the requeste values:

Objektpfad Eigenschaftenname Eigenschaftentitel Wert
LDAP://CN=SRV_Virus,OU=SRV-Konten,OU=NVG Infrastruktur,DC=win,DC=cs,DC=nuernberger,DC=net userAccountControl Role NO_PWDEXP

Regards

[kstanush]

Re: User setting not sticking

I told you the wrong step. One way to see the password setting are to go to a command prompt on the controller and type:

net user <username>

See what these settings are with respect to the password.

Your user account settings indicate that the user cannot change their password, yet this flag isn't being used by MMC. Its hard to say which display is correct at this time, but Hyena is reading the flags correctly. There is the possibility that the account has been denied the right to change its password through the security settings, and I am not sure if AD sets the internals flags correctly based on that.

[Guest]

Re: User setting not sticking

Hello,

Problem solved.
Search at Technet „ADMINSDHOLDER“ for detailed information.
My Admin-Account (Dom-Admin) can´t modify the property “UF_PASSWD_CANT_CHANGE” of an other Dom-Admin. --> see “ADMINSDHOLDER” …

Summery:
Hyena works fine, without any problems --> verify with “net user name” …
Microsoft GUI “AD User and Computers” with problems.

Thanks for support and quick response.

[kstanush]

Re: User setting not sticking

I'm curious if you ever got an error in Hyena when you tried to change this setting. It would seem to me that Windows should have returned an error.

And are you saying that ADU&C reported the incorrect setting for this flag ?

[Guest]

Re: User setting not sticking

I have no error message or a popup window or an eventlog entry. Only ADU&C reported the wrong setting. My first idea was Hyena have a problem. Sorry about this.

U can test this.

1. create new user with dom-admin privileges
2. logon with as dom-admin (other account)
3. change “user cannot set password”
4. close window, open window an u will see this option is still “true”
5. verify setting with “net user name” and u sees the different info. ADU&C reports “true” cmdline report “false”.
6. open hyena and verify, it’s false.
7. remove the new account form dom-admins an repeat step 3-6

Regards