Re: User account querry

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: "Joe Kaplan" <joseph.e.kaplan@xxxxxxxxxxxxxxxxxxxxxxxx>
Date: Wed, 5 Sep 2007 13:42:14 -0500

Unfortunately, there isn't a really clean way to do that.

The issue is that this setting, while appearing as a checkbox in the UI, is
actually making a few changes to the security descriptor for the user object
to block the user's normal ability to change their password. The security
descriptor is basically a big, binary blob and isn't designed in such a
manner that you can easily formulate a query like this.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Matthew" <Matthew@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0E4EF477-512A-4D13-930F-4BB2A672B101@xxxxxxxxxxxxxxxx

Is there a command that can be run to view all users that have "user
cannot
change password" checked within Active Directory Users and Computers?
--
Matt

Prev by Date: GPO and IE7
Next by Date: Error 2312: A session does not exist with this computer name
Previous by thread: GPO and IE7
Next by thread: Re: User account querry
Index(es):
- Date
- Thread

Relevant Pages

Re: Adam - password history
... "reset password" and you'll get change password behavior enforced (history, ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
(microsoft.public.windows.server.active_directory)
Re: Web Single Sign On
... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... current Windows credentials to the server, ... This common identity is the user's username used to logon to the ...
(microsoft.public.dotnet.framework.aspnet.security)
Re: Changing ADAM user password
... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... Running the bind from another W2K3SP1 machine ... support in digest or something like that. ...
(microsoft.public.windows.server.active_directory)
Re: ASP.NET 2.0 WindowsTokenRoleProvider Local Groups Broken
... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... There is no Group property on the WindowsIdentity object in .NET 2.0, ...
(microsoft.public.dotnet.framework.aspnet.security)
Re: Secure SSL with LDAP and AD
... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... LDAP over SSL with a third-party certification authority. ... Note that a self signed cert is probably a very poor choice as nothing ...
(microsoft.public.windows.server.security)