Re: How to change PASSWORD expiration settings with command line?



FB wrote:

I Have a WIn2003SP1 Std Citrix PS4 Server joined to a Win2003 R2 Domain
I have several LOCAL accounts created and i wanna to disable PASSWORD
expiration via Script

I´ve heard abou a NET USER paramater, "/pwnexp " but i think this
parameter
is invalid in Win2003 Servers.

How can i do that? Can i do it with NET USE commands? .VBS? Batch?

I found a Script (Modify a Local User Account So It Never Expires) in
http://www.microsoft.com/technet/scriptcenter/scripts/default.mspx?mfr=true

Can be used for that?


Pasting links from the Microsoft site is a pain. You have to copy the
shortcut from the toc at the left. If the VBScript you refer to is linked
here:

http://www.microsoft.com/technet/scriptcenter/scripts/ds/local/users/lousvb14.mspx

then yes, you can use this to modify local accounts so the password never
expires. Of course, if the server is joined to a domain I would expect you
to use domain accounts rather than local accounts.

As far as I know, net user can be used, but I cannot find the syntax to make
the password not expire. It can be used to configure the user so they cannot
change their own password. One issue is that Domain Controllers do not have
local accounts. Servers that are not DC's do have local accounts.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--


.



Relevant Pages

  • Re: How to change PASSWORD expiration settings with command line?
    ... Now i have to write a script to do this, on all my local accouns (FTP ... External Users) with names begining with "ftp" or to generate a .TXT of users ... I have several LOCAL accounts created and i wanna to disable PASSWORD ... I found a Script (Modify a Local User Account So It Never Expires) in ...
    (microsoft.public.windows.server.scripting)
  • Re: Expiration dates without AD
    ... expires, it cannot be used. ... but the user can change the password and continue to use the account. ... For local accounts, the PasswordExpirationDate ... I need to run a script to enumerate objuser on expiration dates, ...
    (microsoft.public.windows.server.scripting)
  • Local Account Password Reset
    ... We have a bunch of standalone W2K machines with many local accounts. ... the servers, to our Customer Support department who handle customer calls. ... What is the best way for me to allow non-Admin level customer support folks ...
    (microsoft.public.win2000.security)
  • Re: Local user accounts disappear when moving member server to new domain (and forrest)
    ... Having moved literally hundreds of servers between domains I have never seen anything happen to local accounts. ... Both the old and new domains have Windows Server 2003 systems as the DCs. ... They've been using local user accounts on the Win2K TS servers for the terminal services users. ... the two domains are in different forrests as well. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Adding a Domain, child or someghing....
    ... Also Note that you can have member servers with local accounts instead of Domain Accounts. ... For example you could have a Web site server with Local accounts instead of using AD Accounts. ... Is there a way to use our Existing DCs to create another domain or child or something that would allow central administration of the users with out giving them access to resources in our AD Domain? ...
    (microsoft.public.windows.server.active_directory)