Announcement

Collapse
No announcement yet.

Password never expires and user cannot change password

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Password never expires and user cannot change password

    Hi,

    As per the title how do I report on Password never expires and user cannot change password.

    Mike

  • #2
    Password never expires can be seen as one of the possible values if the 'UserAccountControl' attribute is added to your directory query. The value of 'NO_PWD_EXP' will be shown as one of the possible values (there can be more than one). Or, the %SYM_AD_FLAGS_NOEXPIRE% symbol can be added to the query which will show a Yes/No value.

    User Cannot Change Password is a bit more complex as there is not a directory attribute to represent this setting. To add this to a query, you need to add the %SYM_AD_USER_NO_CHG_PWD% symbol. Note that this will require a special function to be called for each user, so its advisable to not add it to a default query, ie add it to a query that you run only when needed.

    Both of these symbols can be found under the Attribute Category 'Special AD Symbols' when updating a directory query.
    Kevin Stanush
    SystemTools Software Inc.

    Comment

    Working...
    X