<![CDATA[Article Comments for Thomas Eck]]>http://www.windowsitpro.com/authors/author/author/5777631/rsscomment/5777631en-USSun, 27 May 2012 07:38:45 GMTSun, 27 May 2012 07:38:45 GMTSelf-Service Account Administrationhttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/self-service-account-administration#commentsAnchorSun, 01 Jun 2008 10:09:28 GMT
What level of authorization is required to download the sample solution ?]]>JoeSun, 01 Jun 2008 10:09:28 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/self-service-account-administration#commentsAnchorPractical Usage of ADSI: Using IADsTools’ General Functionshttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-using-iadstools-general-functions#commentsAnchorSat, 16 Feb 2008 04:02:05 GMT
x]]>johnSat, 16 Feb 2008 04:02:05 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-using-iadstools-general-functions#commentsAnchorPractical Usage of ADSI: Using COM Objects to Manage WTS Profile Paths, Part 2http://www.windowsitpro.com/article/com-and-com/practical-usage-of-adsi-using-com-objects-to-manage-wts-profile-paths-part-2#commentsAnchorTue, 21 Jun 2005 07:23:27 GMT
the part of the code that i needed worked great. Now to build into my scripts that i have already written. I just need to be able to modify the TS shadow to not require Users permission to do so. Guess once i figure out how to do that i will be set. Thx for the great COM file]]>Anonymous User Tue, 21 Jun 2005 07:23:27 GMThttp://www.windowsitpro.com/article/com-and-com/practical-usage-of-adsi-using-com-objects-to-manage-wts-profile-paths-part-2#commentsAnchorPractical Usage of ADSI: Using COM Objects to Manage WTS Profile Paths, Part 2http://www.windowsitpro.com/article/com-and-com/practical-usage-of-adsi-using-com-objects-to-manage-wts-profile-paths-part-2#commentsAnchorThu, 17 Mar 2005 07:26:36 GMT
Great Work ... tanks!]]>Anonymous User Thu, 17 Mar 2005 07:26:36 GMThttp://www.windowsitpro.com/article/com-and-com/practical-usage-of-adsi-using-com-objects-to-manage-wts-profile-paths-part-2#commentsAnchorPractical Usage of ADSI: Password Management for Machine Accounts and Local Administratorshttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchorWed, 16 Mar 2005 07:19:51 GMT
I have one thind to say and it is a great software that fixed my problem. Keroon.]]>Anonymous User Wed, 16 Mar 2005 07:19:51 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchorSelf-Service Account Administrationhttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/self-service-account-administration#commentsAnchorFri, 28 Jan 2005 07:50:03 GMT
Great article.]]>Anonymous User Fri, 28 Jan 2005 07:50:03 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/self-service-account-administration#commentsAnchorPractical Usage of ADSI: Password Management for Machine Accounts and Local Administratorshttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchorFri, 13 Aug 2004 14:09:11 GMT
I downloaded the scripts and used listing 4 to list systems. It ran once on my domain and then failed. It says "user could not be found". And references this line: "Set oComputerAccount=GetObject(oComputer.AdsPath & "$,user")" Any ideas what I am doing wrong?]]>kukriFri, 13 Aug 2004 14:09:11 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchorPractical Usage of ADSI: Password Management for Machine Accounts and Local Administratorshttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchorSat, 14 Feb 2004 01:47:14 GMT

I changed my password but now cannot remember it or the administrator password either. How can I get my password reset without losing any information on my machine. I am running Windows XP Professional.

]]>Tommy E Burton Sat, 14 Feb 2004 01:47:14 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchorSelf-Service Account Administrationhttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/self-service-account-administration#commentsAnchorThu, 15 Jan 2004 09:59:53 GMT
Thomas Eck’s "Self-Service Account Administration" (November 2002, http://www.winnetmag.com, InstantDoc ID 26696) is one of the best and most useful articles I’ve read in Windows & .NET Magazine since I started subscribing about 4 years ago. Articles like this one, which take me from start to finish and let me accomplish something, are the ones I most appreciate. Keep up the great work!]]>Rod Caglia Thu, 15 Jan 2004 09:59:53 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/self-service-account-administration#commentsAnchorPractical Usage of ADSI: Password Management for Machine Accounts and Local Administratorshttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchorFri, 19 Dec 2003 02:34:47 GMT

This is exactly what I am looking for. I have tried to download the Excel file from the Windows Scripting Solutions Web site, but it is no longer available. Where can I get it?

Note from the Editors: To obtain the Excel file, click the 16292.zip link that appears under the Download the Code heading at the beginning of the article.]]>Francois Greyling Fri, 19 Dec 2003 02:34:47 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchorPractical Usage of ADSI: Password Management for Machine Accounts and Local Administratorshttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchorTue, 16 Dec 2003 18:49:38 GMT

Is the time frame for the "Inactive Accounts" Listing 4 wrong? If seconds are used to determine machine accounts older than 180 days, this condition should be 15552000 not 7776000. My calculations say that if seconds are used 7776000 comes out to 90 days not 180.

]]>Jeff Fink Tue, 16 Dec 2003 18:49:38 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchorPractical Usage of ADSI: Managing User Accounts in Win2K and NThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-managing-user-accounts-in-win2k-and-nt#commentsAnchorThu, 16 Oct 2003 14:35:40 GMT

For beginners in IADs scripting like me, it is hard to figure out how the properties are named. You say "you can use the IADsUser interface to set any properties (e.g., FullName, Description)". So where is a list of all these names like FullName, Description, DisplayName, and so on? The rest is very clear and the listings helped me to start. Thanks a lot.

]]>rosario carco Thu, 16 Oct 2003 14:35:40 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-managing-user-accounts-in-win2k-and-nt#commentsAnchorSample Self-Service Account-Administration Applicationhttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/sample-self-service-account-administration-application#commentsAnchorWed, 27 Aug 2003 13:23:53 GMT
everything works but it actually resetting password or unlocking accounts! it says it’s unlock but doesn’t and if you choose reset password it says it couldn’t validate but its using the validation information used to "unlock". any ideas?]]>Ryan Austin Wed, 27 Aug 2003 13:23:53 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/sample-self-service-account-administration-application#commentsAnchorSelf-Service Account Administrationhttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/self-service-account-administration#commentsAnchorWed, 23 Apr 2003 16:29:21 GMT
I like Avatier’s Password Station.NET better because I don’t have to maintain a bunch of hard to read code and it supports every platform under the sun. Check out: www.passwordstation.net]]>Jonny Caporia Wed, 23 Apr 2003 16:29:21 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/self-service-account-administration#commentsAnchorSample Self-Service Account-Administration Applicationhttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/sample-self-service-account-administration-application#commentsAnchorMon, 14 Apr 2003 06:02:39 GMT
Excellent program for Self service password admin. just a small problem, in the database there is a UID field that always require a value. What is this used for ? The reason I ask is that the a zero length is not allowed and this causes the program not to work. please advise]]>timmyMon, 14 Apr 2003 06:02:39 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/sample-self-service-account-administration-application#commentsAnchorSample Self-Service Account-Administration Applicationhttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/sample-self-service-account-administration-application#commentsAnchorThu, 27 Mar 2003 16:01:16 GMT
I am having some difficulties using the Self-Service Account Application. Configuration is as follows: Windows NT 4.0 Domain, Application was installed on a Windows 2000 Adv Server w/ SP3 and all current hot fixes. Created an account and gave this account membership to Domain Admins. Installed COM piece and reference the account created. DSN has been established. Everything appears to be functioning correctly i.e 1. I can add info to database and info is encrypted via Data_collection.asp 2. On the SSA.asp I can a. Authenticate account - (Working) b. I can Reset Password - (Working) c. When I select "Do not reset my password - only remove the account lockout condition" it returns "Per your request, this account has been reset and should allow login. - (Not Working) However when checking item c. via usrmgr the "Account Locked Out" flag is not being reset and user is unable to log on. Any idea what may be causing this?]]>BobThu, 27 Mar 2003 16:01:16 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/sample-self-service-account-administration-application#commentsAnchorSample Self-Service Account-Administration Applicationhttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/sample-self-service-account-administration-application#commentsAnchorThu, 13 Feb 2003 08:57:46 GMT
Ray ... go to the 26696 article not 26695 article and you will see ’download the code’ at the bottom. That is where the zip file is]]>DUSTINThu, 13 Feb 2003 08:57:46 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/sample-self-service-account-administration-application#commentsAnchorSample Self-Service Account-Administration Applicationhttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/sample-self-service-account-administration-application#commentsAnchorThu, 28 Nov 2002 22:33:42 GMT
I have subscriptions to winscripting solutions and win2kmag. I can’t get the 26696.zip file from this article. Why would you reference code from another mag?? Ray]]>Ray Stager Thu, 28 Nov 2002 22:33:42 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/sample-self-service-account-administration-application#commentsAnchorPractical Usage of ADSI: Password Management for Machine Accounts and Local Administratorshttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchorWed, 09 Oct 2002 08:44:21 GMT

Will this work in Windows NT 4.0 domain?

]]>P Shah Wed, 09 Oct 2002 08:44:21 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchorAutomating Hotfixeshttp://www.windowsitpro.com/article/patch-management/automating-hotfixes#commentsAnchorMon, 01 Jul 2002 11:07:27 GMT
I enjoyed your article thoroughly ("Automating Hotfixes," Doc# 24268) and decided to put it’s methods it to use in my environment. My goal is to provide proof to operations that it works, and then back a proposal for production deployment with empirical evidence of success. I’ve setup all the directories on a central server and have run the HIVE.CMD file to create the Install scripts, and I’m busy making HIVEEXEC.CMD files, but I now I face the programmatic challenge of multiple OS’s. Microsoft, as you know, creates different patches for different operating systems (in some situations), but the HIVEEXEC.CMD files do not differentiate between OS. I’ve considered keeping lists of servers by OS, but in a lab things change rapidly. So I’ve begun engineering a method of parsing the file version information from explorer.exe to discern the OS to which it belongs, but I’m not really satisfied with that method. The alternative may be parse the "archive" folders within each "machine" folder, but managing the executables (the patches themselves) is the next challenge once the OS is known. Any thoughts, or have I overlooked something?]]>Roy Jensen Mon, 01 Jul 2002 11:07:27 GMThttp://www.windowsitpro.com/article/patch-management/automating-hotfixes#commentsAnchorAutomating Hotfixeshttp://www.windowsitpro.com/article/patch-management/automating-hotfixes#commentsAnchorWed, 29 May 2002 14:37:13 GMT
the instructions in InstantDoc #24268 do not seem to work. If I put a UNC path in as a system variable like instructed it doesn’t work. If I do it on the local machine and put the local path (ie c:\hive) it does work. How can I get this script to work on remote machines?]]>MitchWed, 29 May 2002 14:37:13 GMThttp://www.windowsitpro.com/article/patch-management/automating-hotfixes#commentsAnchorPractical Usage of ADSI: Using COM Objects to Manage WTS Profile Paths, Part 2http://www.windowsitpro.com/article/com-and-com/practical-usage-of-adsi-using-com-objects-to-manage-wts-profile-paths-part-2#commentsAnchorSun, 09 Dec 2001 15:07:40 GMT
Great work on that TerminalServer.dll COM object, it really save a lot of work in automating user creation/alteration. Are there any plans to include more of the WTS functions in the future? Please :-)]]>Preben V Louring Sun, 09 Dec 2001 15:07:40 GMThttp://www.windowsitpro.com/article/com-and-com/practical-usage-of-adsi-using-com-objects-to-manage-wts-profile-paths-part-2#commentsAnchorPractical Usage of ADSI: Server Consolidationhttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-server-consolidation#commentsAnchorSun, 11 Nov 2001 18:36:02 GMT
This script calls the functions in this order:

1. Call SetPermissions(TargetPath, UserADsPath, "CH")
2. Call ContentMigration(UserHomeDirectoryPath, TargetPath)

Step 1 fails because the TargetPath is not created until step 2.

Also, when I run this code I get ’Permission Denied’ when the script executes "Call FSO.CopyFile(File, TargetDirectory)". I’m running it as Administrator on shares and NTFS that are set to ’Everyone:FULL’. Any ideas?? I cannot seem to copy any files using CopyFile.
]]>Scott Dawson Sun, 11 Nov 2001 18:36:02 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-server-consolidation#commentsAnchorPractical Usage of ADSI: Password Management for Machine Accounts and Local Administratorshttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchorWed, 17 Jan 2001 20:19:49 GMT
This article really sparked an interest in me. I just found one thing missing and one thing wrong. The one thing missing: Research on "secure channel password" needs more detail. Standard TechNet documentation is only partially clear. What happens after 10 days? It’s not clear! I’ve been looking at the refresh rate (number of days since last password change) and found that several are still pingable at 22 days. If the default is 7 days and the response to an ’Immediate reply" is required, why isn’t the machine updating it’s secure channel password within the logon sequence or while it’s logged in? My biggest concern is with the remote users. Imagine having to get a remote user "out of" and "back in" a domain over the phone. Not what I want as a part of my daily routine. Overall, I like this tool, but clarification is needed from Microsoft before I’ll go deleting accounts... particularly, remote accounts. And of course those aren’t readily known as remote accounts. I’m going to do some remote access testing, if I find anything meaningful, I’ll pass it along to you if you’d like. The one thing wrong: 7776000 is only 90 days. The article indicates 180 days.]]>James Turner Wed, 17 Jan 2001 20:19:49 GMThttp://www.windowsitpro.com/article/active-directory-service-interfaces-adsi/practical-usage-of-adsi-password-management-for-machine-accounts-and-local-administrators#commentsAnchor