Hi all, do you see any chance to set the PASSWD_CANT_CHANGE flag from AD's userAccountControl attribute via Net::LDAP? If not, is there any other perl module or function that I could use?
PASSWD_CANT_CHANGE is something special, because it requires to set some security attributes (ACE). If interested, please see the attached KB articles: http://support.microsoft.com/kb/305144 http://msdn.microsoft.com/en-us/library/aa746398.aspx Generally the question seems to focus on setting ACEs or security descriptors at all. TIA. Bye. Michael.
