Re: "user must change password at next logon"

From: Hyena Support (kevin_at_systemtools.com)
Date: 10/28/05 

Date: 28 Oct 2005 09:04:53 -0700

I wasn't sure if you would contact SystemTools, so I thought that I
could explain a bit.

This problem could be caused by a number of factors, including some
quirky Microsoft designs in AD.

I'll assume that you have your Windows AD domain included in Hyena as a
Windows 200x domain. To verify, just click the first toolbar button,
and click on the domain entry, and verify the domain type. Windows NT
domains use a different protocol than AD, and there is the possibility
that the functions are not property synchronized by Microsoft, so you
might get different results.

When looking at an AD user's properties, Hyena gets the "user must
change password at next logon" by looking at the 'pwdlastset' property.
 Its very strange that MIcrosoft chose this property to hold this
information, but that is what they did. You can search MSDN for
'pwdlastset' and get a bit more information on it.

If you right click on a user in Hyena, select Listing Views->User (All)
you will get a list of all of the user's directory attributes and
values. You can also use the new ADSI-Edit like function "Manage
Directory Attributes" if you have v6.5 or later. Either way, look for
the value of the 'pwdlastset' attribute. If the value is zero, then
the user is supposed to change their password at the next logon.

Also, keep in mind that Hyena may be looking at a different domain
controller than ADU&C, and you can always use and get access to the
exact same dialog at ADU&C in Hyena by using the "Shell Properties"
function.

If you want to track this problem down further, please contact
support@systemtools.com

Thanks

-Kevin Stanush
SystemTools Software Inc.
http://www.systemtools.com

Relevant Pages

  • Re: Domain password change policy
    ... By the way, 'Hyena' (http://www.systemtools.com/hyena from SystemTools ... password ages. ... You can also use the Exporter Pro utility to create ...
    (microsoft.public.win2000.group_policy)
  • Re: AD AutoScripting
    ... Hyena and Active Directory and never had been to my knowledge. ... for Windows adminstration. ... Sometimes, Microsoft support technicians, ... > lab environment before implementing it in a production environment. ...
    (microsoft.public.win2000.active_directory)
  • Re: AD AutoScripting
    ... I have not tried Hyena yet so I have no opinion one way ... software in their production environment. ... > for Windows adminstration. ... Sometimes, Microsoft support technicians, ...
    (microsoft.public.win2000.active_directory)
  • RE: Scripts to crawl all computer registries on the network
    ... You can try Hyena. ... Travel to the Windows 2003 Homepage @ ... The views and opinions expressed in this newsgroup posting are mine and do ...
    (microsoft.public.win2000.setup_deployment)
  • Re: ADAM ADSI Viewer?
    ... Hyena, from SystemTools: ... My opinion is obviously biased, but we do have a 30-day free trial ... Prev by Date: ...
    (microsoft.public.windows.server.active_directory)