LDIFDE or ADMT

I have a couple thousand users on an NT4 server in a workgroup environment. They are certain type of IIS user that is authenticated through ISAPI, and they logon to a web page. They need no other rights.

All I need are their user names, full names, descriptions, password, account disabled or not, (and possibly password never expires, and cannot change password). What would be the best to use, LDIFDE or ADMT? Can I use ADMT on workgroup server? All the instructions I've found only refer to the "source domain".

If I can't use ADMT what is the simplest LDIFDE syntax to import user names, full names, descriptions, password, account disabled or not, password never expires, and cannot change password?

I think I can do the 'password never expires', and 'cannot change password' in AD Users and Computers, once I get everyone imported, so I may not really need to import that part.

Thanks, TV

.

Relevant Pages

  • Re: AD password policy in Forms auth against AD
    ... > failed (due to lockout, disabled, expired, user must change password, etc. ... >> password expires ... >> possible with AD, I could set the expiration time to a year, and force ... >> hundred customers, where all customers will be stored in a AD (in their ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: removing the "password never expires" setting from LOCAL user (not Active Directory) a
    ... The code shouldn't set "User must change password at next logon". ... Note that with the LDAP provider, you assign the value 0 to the pwdLastSet ... > This does indeed remove the "Password never expires" option but it ...
    (microsoft.public.scripting.vbscript)
  • Re: password never expires
    ... Set objCommand = CreateObject ... Set objConnection = CreateObject ... > In my requirement i need to uncheck both the> 1) "user cannot change password"> 2) "Password never expires" checkboxes. ...
    (microsoft.public.win2000.active_directory)
  • Re: AD password policy in Forms auth against AD
    ... need a service account that can access the user account to read all of their ... (due to lockout, disabled, expired, user must change password, etc. vs. ... > password expires ... > hundred customers, where all customers will be stored in a AD (in their ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Local user properties set using scripts
    ... *user cannot change password. ... It set only password expires. ... objPasswordExpirationFlag = objUserFlags OR ADS_UF_DONT_EXPIRE_PASSWD ...
    (microsoft.public.windows.server.scripting)
Loading