ASP.NET C# Active Directory - See how long before a user's password expires

tags:

views:

1362

answers:

2

+3 Q:

ASP.NET C# Active Directory - See how long before a user's password expires

Hey everyone,

I have an interesting problem, I am writing a password management webpage/service and I am trying to find a way to determine when a user's password is going to expire so I can manually reset their other passwords with it and send out an email, etc.

The problem I'm having is that when trying to loop through my users I'm getting the bulk of them not having a pwdlastset attribute so I can't determine when it's going to expire.

So I guess I am looking for ideas on a good way to check for when a user's password is going to expire aside from using the pwdlastset property and calculating the time left.

Thanks a bunch.

A:

As far as I know, if pwdlastset is zero or missing, the user is either required to change their password at the next logon or their account is setup with a non-expiring password. Could this be the cause of what you are seeing?

Jeff Siver 2009-09-01 16:04:18

+4 A:

marc_s 2009-09-01 16:27:19

it seems the user running my AD queries didn't have permission to view the properties of everyone, so now it seems like I can view the pwdlastset attribute, now a new problem arises with accounts that are technically disabled but not indicated as such in the useraccountcontrol, is there another setting where it would be viewable?

Jimmy 2009-09-01 17:09:56

phew! You hit all the hard ones, eh? Determining account lockout is another odyssey on its own.... unfortunately, the UF_LOCKOUT flag on UserAccountControl isn't really used for that :-(

marc_s 2009-09-01 17:14:12

@JImmy: get the book I mentioned - it contains all the answers, and a lot more :-) Good stuff indeed

marc_s 2009-09-01 17:17:49

Thanks for the link, probably going to order that, and also thanks for your help, this has been an endeavor

Jimmy 2009-09-01 17:57:47

ansaurus

tags:

views:

answers:

ASP.NET C# Active Directory - See how long before a user's password expires

related questions