RE: [ActiveDir] Password Never Expires...

[joe]

Yeah secdata will dump that info.   You would do best to tell it to just dump the IDs that are set to never expire with a filter   secdata joe.com /f "&(objectcategory=person)(objectclass=user)(useraccountcontrol:1.2.840.113556.1.4.803:=65536)"   You could also use adfind   adfind -bit -gc -b -f "&(objectcategory=person)(objectclass=user)(useraccountcontrol:AND:=65536)" name     You could also use dsquery with dsmod to modify them all.   ------------- http://www.joeware.net   (download joeware) http://www.cafeshops.com/joewarenet  (wear joeware)       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, Mark Sent: Friday, April 02, 2004 10:33 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Password Never Expires... Frank, I believe this is set using the useraccountcontrol flags, which you can read about here: http://www.jsiinc.com/SUBL/tip5500/rh5504.htm   You might look at Joe’s tool secdata available at www.joeware.net. I believe it will output the useraccountcontrol flag currently set per user, and you’ll be looking for the ones that the tool enumerates as NO_PWD_EXPIRE   Also, one of the ds_ tools may give you what you need, but I’m not yet familiar with them enough to know which one.   <mc> -----Original Message----- From: Frank Abagnale [mailto:[EMAIL PROTECTED] Sent: Friday, April 02, 2004 7:46 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Password Never Expires...   Hi, One of our helpdesk technicians has been creating new user accounts with the 'Password Never Expires' tab selected.   does anyone know a way of how I can find out which accounts are set to 'Password Not Expire' and if there is an automated way to reset these?   thanks...   -frank   Do you Yahoo!? Yahoo! Small Business $15K Web Design Giveaway - Enter today