Re: Need to read "Store password in reversible encryption for all users in the domain"
- From: "Richard Mueller" <rlmueller-NOSPAM@xxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 26 Oct 2006 13:24:50 -0500
Raymond Vought wrote:
Does anybody know how to return the "Store password in reversible
encryption for all users in the domain" setting on the local security
password policy setting?
The resultant will do, whether it is set locally or by domain policy.
A bit of the userAccountControl attribute of the user object controls this.
As far as I know, the setting can be different for different users. A
VBScript program to check a specified user:
==================
Const ADS_UF_ENCRYPTED_TEXT_PASSWORD_ALLOWED = &H80
Set objUser = GetObject("LDAP://cn=Jim User,ou=Sales,dc=MyDomain,dc=com")
lngFlags = objUser.userAccountControl
If (lngFlags AND ADS_UF_ENCRYPTED_TEXT_PASSWORD_ALLOWED) <> 0 Then
Wscript.Echo "Store password using reversible encryption set"
Else
Wscript.Echo "Store password using reversible encryption NOT set"
End If
==============
To retrieve all users where this is set, use the following filter:
(&(objectCategory=person)(objectClass=user)" _
& "(userAccountControl:1.2.840.113556.1.4.803:=128))
To retrieve all users where this is NOT set, use:
(&(objectCategory=person)(objectClass=user)" _
& "(!userAccountControl:1.2.840.113556.1.4.803:=128))
You can use these filters in ADUC. Or, see this link for using ADO to
retrieve info on users, which explains how to use these filters:
http://www.rlmueller.net/ADOSearchTips.htm
--
Richard
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net
.
- Follow-Ups:
- References:
- Need to read "Store password in reversible encryption for all users in the domain"
- From: Raymond Vought
- Need to read "Store password in reversible encryption for all users in the domain"
- Prev by Date: Re: Copy group membership
- Next by Date: Re: Move Computer from default OU to another during build process
- Previous by thread: Need to read "Store password in reversible encryption for all users in the domain"
- Next by thread: Re: Need to read "Store password in reversible encryption for all users in the domain"
- Index(es):
Relevant Pages
|
