Re: [ActiveDir] lockout account

[Tom Kern]

Only the sytem can change that.

 

 

 

Just curioisity.

No real reason.

 

I was just interested that if you wanted to lockout an account for testing purposes, you could do it with a script or mainipulating an attrib instead of making ldap or net use calls with bad passwords.

 

Thanks a lot for all your help

 

 

On 4/18/06, Brian Desmond <[EMAIL PROTECTED]> wrote:

You can try setting the lockout bit (below) on userAccountControl but I'm nearly positive only the  system can set that bit. What is your end goal/why are you trying to do this?

 

ADS_UF_LOCKOUTADS_UF_LOCKOUT The account is currently locked out. = 16,    // 0x10

 

Thanks,
Brian Desmond

[EMAIL PROTECTED]

 

c - 312.731.3132

 

 

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Tom Kern
Sent: Tuesday, April 18, 2006 9:49 AM

To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] lockout account

 

I guess what I want to know is what attrib you can set to just lock it out...

 

Thanks

 

On 4/18/06, [EMAIL PROTECTED] < [EMAIL PROTECTED] > wrote:

When testing, I simply use a "net use" command and provide the correct userID but wrong pw. Repeat until the account locks.

 

Simple but effective :)

 

neil

 

---

From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Tom Kern
Sent: 18 April 2006 14:31
To: activedirectory
Subject: [ActiveDir] lockout account

 

How can you programatically lockout an account?

Do i have to manipulate the userAccountControl attribute or lockoutTime attrib?

 

Can you just do this using Adsiedit.msc or LDP.exe as well?

 

 

Just curious.

Thanks

PLEASE READ: The information contained in this email is confidential and

intended for the named recipient(s) only. If you are not an intended

recipient of this email please notify the sender immediately and delete your

copy from your system. You must not copy, distribute or take any further

action in reliance on it. Email is not a secure method of communication and

Nomura International plc ('NIplc') will not, to the extent permitted by law,

accept responsibility or liability for (a) the accuracy or completeness of,

or (b) the presence of any virus, worm or similar malicious or disabling

code in, this message or any attachment(s) to it. If verification of this

email is sought then please request a hard copy. Unless otherwise stated

this email: (1) is not, and should not be treated or relied upon as,

investment research; (2) contains views or opinions that are solely those of

the author and do not necessarily represent those of NIplc; (3) is intended

for informational purposes only and is not a recommendation, solicitation or

offer to buy or sell securities or related financial instruments. NIplc

does not provide investment services to private customers. Authorised and

regulated by the Financial Services Authority. Registered in England

no. 1550505 VAT No. 447 2492 35. Registered Office: 1 St Martin's-le-Grand,

London, EC1A 4NP. A member of the Nomura group of companies.