> for many thousands of other businesses around the world. And if it > isn't enough, I would email the dev who wrote it, he seems to be fairly > responsive to requests for changes. :) >
Yeah I hear buying the company thong goes a long ways with the dev team. I guess they're thinking maybe they'll get a chance at seeing something Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:ActiveDir- > [EMAIL PROTECTED] On Behalf Of joe > Sent: Wednesday, May 24, 2006 12:04 PM > To: [email protected] > Subject: RE: [ActiveDir] Machine Psswd Age > > You could... It won't be 100% accurate though because there is no > requirement for machines to change their password. It is voluntary on > their part and machines that usually come in over VPN don't usually > touch their password for instance, nor any machine that has been > configured to not change its password. Plus if you have cluster > accounts you have to be careful of those as well (they should be marked > special so they can be avoided in fact). There is no way I have seen to > date to be 100% accurate for computer accounts or userids in every > single environment, so much depends on how things are done locally. > > Other than that, before writing a utility, I would download > http://www.joeware.net/win/free/tools/oldcmp.htm and try that to see > what it does that I don't like first. It may be enough for me as it is > for many thousands of other businesses around the world. And if it > isn't enough, I would email the dev who wrote it, he seems to be fairly > responsive to requests for changes. :) > > joe > > > -- > O'Reilly Active Directory Third Edition - > http://www.joeware.net/win/ad3e.htm > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Brian Cline > Sent: Wednesday, May 24, 2006 11:42 AM > To: [email protected] > Subject: RE: [ActiveDir] Machine Psswd Age > > So if I wanted to write a utility to seek out stale computer objects in > the domain that were never properly unjoined, could I simply look at > each computer's pwdLastSet attribute? And mayhaps use a value more than > 30 days (as we have a few traveling laptops), perhaps 90 or 180? > > -- > Brian Cline > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond > Sent: Wednesday 24 May 2006 11:15 > To: [email protected] > Subject: RE: [ActiveDir] Machine Psswd Age > > 30 Days > > Thanks, > Brian Desmond > [EMAIL PROTECTED] > > c - 312.731.3132 > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:ActiveDir- > > [EMAIL PROTECTED] On Behalf Of Za Vue > > Sent: Wednesday, May 24, 2006 11:04 AM > > To: [email protected] > > Subject: [ActiveDir] Machine Psswd Age > > > > Anyone know how often machine passwords are renew/reset in the > domain? > > > > -Z.V. > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: http://www.mail- > > archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail- > archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail- > archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
