Re: Creating accts through LDAP

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 01/12/05 

Date: Tue, 11 Jan 2005 22:07:09 -0500

This is handled in the backend by setting useraccountcontrol &
ADS_UF_PASSWD_NOTREQD when the account is created so it can exist without a
password.

   joe 

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Joe Kaplan (MVP - ADSI) wrote:
> Create account, then add password, then enable it via userAccountControl. 
> The documentation is misleading in that the account can't be enabled without 
> a password with domain password policy, but can actually exist.
> 
> Joe K.
> 
> "GMartin" <gmartin@gmartin.org> wrote in message 
> news:%23MKncID%23EHA.1408@TK2MSFTNGP10.phx.gbl...
> 
>>Referencing How To Change a Windows 2000 User's Password Through LDAP
>>http://support.microsoft.com/?kbid=269190
>>
>>"...The attribute(unicodepwd)can only be modified; it cannot be added on 
>>object creation..."
>>
>>So, given that our domain (ou) policy requires passwords, how does one 
>>create an account without it?  Do we create the account in an OU with no 
>>such policy, add the password and then move the acct to the resting place?
>>
>>(scratching my head)
>>
>>\\Greg 
> 
> 
>

Relevant Pages

  • Re: Unlock acct permissions
    ... Joe is one of the best in the world. ... How do I get DSACLS to run on a specific account? ... The permissions in the security do not seem>>> to ... The correct permissions are on the security group, ...
    (microsoft.public.win2000.active_directory)
  • Re: Unlock acct permissions
    ... It may actually be the best of the bunch but it is very old now so it is mostly about those GOOD FUNDAMENTALS that one needs and which Joe referenced. ... >>>Overall you appear to be a very "green" admin and you should buy one or more>>>books and learn this stuff before you do too much more. ... >>>Joe Richards Microsoft MVP Windows Server Directory Services ... How do I get DSACLS to run on a specific account? ...
    (microsoft.public.win2000.active_directory)
  • Re: Service running as Local system account Unable to map drive on
    ... Hi Joe and Phillip ... account has full permissions on both the share and the file system itself. ... Security Eventlog: ...
    (microsoft.public.security)
  • Re: Password Expired Query
    ... issue their own LDAP query to do this. ... If you just want to get this done, Joe R's tool is very easy. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... The problem is there isn't a flag saying the account is expired, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Question about login script
    ... "Joe" wrote: ... > Is something wrong with my SQL statement? ... >>> I have a login page. ... he needs to activate his account. ...
    (microsoft.public.dotnet.framework.aspnet)