Free Power Tools Brochure
Get Mark Minasi's
17-page guide today!



      

advertisement

Get Newsletters

  • Get the Latest News
  • Product Updates
  • Helpful Tricks
  • Productivity Tips

Subscribe Now!

January 03, 2001 07:03 PM

Practical Usage of ADSI: Password Management for Machine Accounts and Local Administrators

Rating: (0)
Windows IT Pro
InstantDoc ID #16292
Active Directory Service Interfaces
Throughout the past 2 years, Windows Scripting Solutions (formerly Win32 Scripting Journal) has presented articles about how to use Active Directory Service Interfaces (ADSI) in scripts to manage most elements of Windows 2000 and Windows NT enterprise administration. With these basic elements mastered, you now have the foundation to use ADSI and your favorite scripting language to create robust administrative applications.

In this ...

ARTICLE TOOLS

You must be a paid VIP Member to access this entire article.

Already a VIP Member? Please log in now:

NOT A VIP MEMBER? YOU CHOOSE:

Monthly or Annual

VIP Membership

Compare Member Benefits

Add a Comment

I have one thind to say and it is a great software that fixed my problem. Keroon.

Anonymous User 3/16/2005 7:19:51 AM


I downloaded the scripts and used listing 4 to list systems. It ran once on my domain and then failed. It says "user could not be found". And references this line: "Set oComputerAccount=GetObject(oComputer.AdsPath & "$,user")"

Any ideas what I am doing wrong?

kukri8/13/2004 2:09:11 PM


I changed my password but now cannot remember it or the administrator password either. How can I get my password reset without losing any information on my machine. I am running Windows XP Professional.



Tommy E Burton 2/14/2004 1:47:14 AM


This is exactly what I am looking for. I have tried to download the Excel file from the Windows Scripting Solutions Web site, but it is no longer available. Where can I get it?



Note from the Editors: To obtain the Excel file, click the 16292.zip link that appears under the Download the Code heading at the beginning of the article.

Francois Greyling 12/19/2003 2:34:47 AM



Is the time frame for the "Inactive Accounts" Listing 4 wrong? If seconds are used to determine machine accounts older than 180 days, this condition should be 15552000 not 7776000. My calculations say that if seconds are used 7776000 comes out to 90 days not 180.



Jeff Fink 12/16/2003 6:49:38 PM


Will this work in Windows NT 4.0 domain?



P Shah 10/9/2002 8:44:21 AM


This article really sparked an interest in me. I just found one thing missing and one thing wrong.

The one thing missing: Research on "secure channel password" needs more detail. Standard TechNet documentation is only partially clear. What happens after 10 days? It's not clear!

I've been looking at the refresh rate (number of days since last password change) and found that several are still pingable at 22 days. If the default is 7 days and the response to an 'Immediate reply" is required, why isn't the machine updating it's secure channel password within the logon sequence or while it's logged in?
My biggest concern is with the remote users. Imagine having to get a remote user "out of" and "back in" a domain over the phone. Not what I want as a part of my daily routine.

Overall, I like this tool, but clarification is needed from Microsoft before I'll go deleting accounts... particularly, remote accounts. And of course those aren't readily known as remote accounts. I'm going to do some remote access testing, if I find anything meaningful, I'll pass it along to you if you'd like.

The one thing wrong: 7776000 is only 90 days. The article indicates 180 days.

James Turner 1/17/2001 8:19:49 PM


You must log on before posting a comment.

Are you a new visitor? Register Here

advertisement

Windows XP Share Privileges

I've two PCs, ABC and XYZ, both are running windows xp Pro, and both have simple file sharing disabled. And I want to share a folder on ABC, to be ...222-96225

advertisement

GOOGLE LINKS
SPONSORED LINKS
FEATURED LINKS

Podcasts

To successfully implement virtual desktops, IT administrators must carefully match user requirements to specific desktop technologies. Listen to this podcast to learn what you need to keep in mind when formulating your approach to desktop virtualization.

Downloads

PacketTrap IT is a comprehensive and affordable network management and application monitoring solution that solves problems associated with bandwidth, network and application performance, and connectivity. Gain insight into your network - try PacketTrapIT free for 21 days!

Web Seminars

Aside from its employees, data is an organization’s most important resource. Join Windows technical specialist and 11-time MVP John Savill to learn the best practices for managing data using features in Windows Server.
View this web seminar on demand!

eLearning Series

We bring the experts direct to you to share their real-world perspective and expertise. During each event, three sessions stream in real time, so you can learn, ask questions, and get solutions.
Upcoming event: Getting the Most with Exchange 2010 with Paul Robichaux

Subscribe to Windows IT Pro!

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.