Because it derives from the User class, I can't think of a reason why you couldn't set that value. I'm not sure (and have no way to test at the moment) if that value would be valid for what you're doing however.
You could just disable the computer accounts vs. expire them. That's available from the GUI if you want to access it that way else it's scriptable. al -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of P West Sent: Tuesday, March 15, 2005 2:28 PM To: [email protected] Subject: Re: [ActiveDir] Can you expire a computer account in AD thanks AL thanks Tom Ok i used oldcmp. among others and the pwdlastset (oldcmp works great) came back feb 2000 even though the password expiration says march 20 2005. i dont think theres an issue with locating old accounts with pwdlastset the thing is what's up with a password expiration date of march 20 2005 if the pwdlastset is feb 2000. this password for pc account should get reset every 30 days. The ping was a great idea, we were planning on doing it. But our dns records are not so clean so u can ping a pc and get a response but its a different pc name when you ping -a ip address. DNS scavenging is getting turned on , but i think the issue may still exist. One last point. Can u or cant you expire a computer account in ad? i dont think you can , i tried to google it , next im callin ms to ask ,.but wanted to know what u folks opinion on it was. ----- Original Message ----- From: "Mulnick, Al" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Tuesday, March 15, 2005 2:10 PM Subject: RE: [ActiveDir] Can you expire a computer account in AD > He beat me to it ;0) > > You may also want to couple that with a simple ping method to validate if > the machine actually exists or not. Might cross reference it with DHCP/DNS > if ping is too much overhead. > > Just some thoughts. > > Al > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Tomasz Onyszko > Sent: Tuesday, March 15, 2005 1:55 PM > To: [email protected] > Subject: Re: [ActiveDir] Can you expire a computer account in AD > > P West wrote: > > We are trying to clean up old AD pc accounts. Have used every tool > > under the sun to come up with the pwdlastset to show old accounts. > > > > example > > One pc says the pwdlast set is feb 2000 when our ad guy looks at > > password expiration the dates are say march 20 2005. but the > > pwdlastset date is feb 2000. > > > > For some reason the pwdlastset is not updating or at least thats what > > im thinking. > > try to use Joe's oldcmp tool: > http://www.joeware.net/win/free/tools/oldcmp.htm > > > -- > Tomasz Onyszko [MVP] > [EMAIL PROTECTED] > http://www.w2k.pl > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
