VBScript to return AD password expirations returning bad data

[twbanks]

I've been using a script very similar to the one in thread329-1552035
for the last several months without error.

Suddenly, last week, the resulting password expirations are 48 days earlier than they should be. The value 48 is consistent. Looking at the users in ADUC, their passwords are set to what I think they ought to be (x+48), but the script still returns x.

 

[twbanks]

Figured it out.
This part was looking at the domain of the account running the script rather than the domain that held the users I was searching for. Apparently the pwd policy for that domain had changed. After specifying the right domain, the numbers are correct.

Set objDomain = GetObject("LDAP://" & objADSystemInfo.DomainDNSName)
Set objMaxPwdAge = objDomain.Get("maxPwdAge")