Thanks for the link- will definitely have a look. Brian
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Wednesday 24 May 2006 12:04 To: [email protected] Subject: RE: [ActiveDir] Machine Psswd Age You could... It won't be 100% accurate though because there is no requirement for machines to change their password. It is voluntary on their part and machines that usually come in over VPN don't usually touch their password for instance, nor any machine that has been configured to not change its password. Plus if you have cluster accounts you have to be careful of those as well (they should be marked special so they can be avoided in fact). There is no way I have seen to date to be 100% accurate for computer accounts or userids in every single environment, so much depends on how things are done locally. Other than that, before writing a utility, I would download http://www.joeware.net/win/free/tools/oldcmp.htm and try that to see what it does that I don't like first. It may be enough for me as it is for many thousands of other businesses around the world. And if it isn't enough, I would email the dev who wrote it, he seems to be fairly responsive to requests for changes. :) joe -- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Cline Sent: Wednesday, May 24, 2006 11:42 AM To: [email protected] Subject: RE: [ActiveDir] Machine Psswd Age So if I wanted to write a utility to seek out stale computer objects in the domain that were never properly unjoined, could I simply look at each computer's pwdLastSet attribute? And mayhaps use a value more than 30 days (as we have a few traveling laptops), perhaps 90 or 180? -- Brian Cline -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Wednesday 24 May 2006 11:15 To: [email protected] Subject: RE: [ActiveDir] Machine Psswd Age 30 Days Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132 > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:ActiveDir- > [EMAIL PROTECTED] On Behalf Of Za Vue > Sent: Wednesday, May 24, 2006 11:04 AM > To: [email protected] > Subject: [ActiveDir] Machine Psswd Age > > Anyone know how often machine passwords are renew/reset in the domain? > > -Z.V. > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail- > archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
