Can anyone help me out on this simple script? 1

[bdragun]

can anyone help me out on this simple code? i am trying change passwords to a simple password in active directory when this script runs. It changes the password fine the problem becomes when i try to reset the User must change password at next logon option. At first i was thinking it was my LDAP query but like i said it changes the users password fine. And i already looked at the microsoft technet article:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/scriptcenter/user/ScrUG30.asp

here is the script:

strUserName = InputBox ("Enter the username&quot
Set objUser = GetObject("LDAP://OURDOMAIN/" & strUsername & ",user&quot
objUser.Put "pwdLastSet", 0
objUser.SetInfo
objUser.SetPassword "password"

 

[mrmovie]

to expire a users account so they have to change it

objUser.Put "PasswordExpired", 1
objUser.SetInfo

if you want to remove...

objUser.Put "PasswordExpired", 0
objUser.SetInfo

give it a whirl

mrmovie

 

[bdragun]

mrmovie,
Thanks for the help but i think that is for changing a password on a local computer:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/ScriptCenter/user/ScrUG114.asp

I am trying to change and expire the password on our domain.

 

[mrmovie]

hello, i think you might find that what i have put is correct...your AD will support you connecting to it by supplying the WinNT part,,,prob something to do with people being able to us NT machines as part of a AD domain,,,just change the domain to be yours

 

[mrmovie]

n o offense intended but you aked for advice on how to do something.

i am running windows2000 in an Active Directory which is in NATIVE mode,,,when i run the following it returns FALSE
which means my account isnt locked out.

give the stuff i sent you a try before correcting me on mistakes which i dont think i have made....heres a smile though
;-)))))


userdomain = "domfsc01"
username = "mchrmoyl"
Set User = GetObject("WinNT://" & userdomain & "/" & username & ",user&quot

msgbox User.IsAccountLocked




have you tried the below from the other post???


u need to use adsi.
its is tricky due to some Dc being upto date and others not, simple version would be

Set User = GetObject("WinNT://" & userdomain & "/" & username & ",user&quot
If User.IsAccountLocked = True Then
User.IsAccountLocked = False
User.SetInfo
End If

 

[bdragun]

This worked thank you very much.

 

[bdragun]

I am sorry, yes they both are working.

Thanks again

 

[mrmovie]

no probs, if you are interested in manip'ing AD or any other ldap type of stuff you should invest in
ISBN 1-57870-219-4
adsi scripting for system admin

be careful of what Domain controller the helpdesk person is connection to, it will the one in their zone or LAN or whatever,,,this might be a different DC to one that the user in scotland is being validated against....in this case you might have to do something clever with a script that always connects the Domain master central don gordon server,,,or connect to the one that will authenticate the user.....

 

[bdragun]

Yeah i will do plenty of testing before i go live with the scripts. and i will check out the book too

you've been a great help, and i will probably be posting some more issues when i have them so keep an eye out. haha

thanks