You probably don't need ACCTINFO2.DLL

re: You probably don't need ACCTINFO2.DLL

NedPyle [MSFT] — Mon, 25 Apr 2011 14:37:58 GMT

Good and bad news. :-/

You can see Password Last Set easily if you just turn on the attribute editor -it will display PwdLastSet in human-reable plain text and show date, time, and time zone.

But Password Expires will require mental gynamstics. "She set her password on the April 25th 2011 and we have a 42 day max password age so it will require change on Sunday June 6."

My main question would be: why do I care? The user will be warned in advance at every logon once their password is close to expiration and when it expires, they will have a very clear message (for them or their help desk) explaining why they cannot logon and that they are required to change their password.

Are you mainly looking for feature parity or do you have a business process that makes this useful? If the latter I'd like to hear about it so I can get DSAC improved.

re: You probably don't need ACCTINFO2.DLL

Justin Martahler — Mon, 25 Apr 2011 12:11:36 GMT

So ADAC looks pretty cool, but one thing I liked about acctinfo2.dll was the Password Last Set and Password Expires information nuggets. Am I just not seeing that in the new location or is it just not part of the ADAC tool?

re: You probably don't need ACCTINFO2.DLL

NedPyle [MSFT] — Thu, 14 Apr 2011 20:48:29 GMT

Thanks Santhosh :-D

re: You probably don't need ACCTINFO2.DLL

Santhosh Sivarajan- — Thu, 14 Apr 2011 19:45:53 GMT

Great article Ned.

-Santhosh

re: You probably don't need ACCTINFO2.DLL

NedPyle [MSFT] — Wed, 13 Apr 2011 20:25:03 GMT

Good call, those would be:

969429 Windows 7 clients cannot locate the Active Directory Management Gateway service that is installed on Windows Server 2003-based domain controllers

support.microsoft.com/default.aspx

967574 Windows 7 clients cannot locate the Active Directory Management Gateway Service installed on Windows Server 2008-based domain controllers

support.microsoft.com/default.aspx

Thanks David!

re: You probably don't need ACCTINFO2.DLL

DavidReller — Wed, 13 Apr 2011 20:11:42 GMT

If you install ADWS on Windows Server 2003, there is a hotfix that you need to install before it all works automagically. Without the hotfix, any commands from an AD PowerShell module (At least on a WS2008R2 box) must be pointed at a specific 2003 server with ADWS installed it before they will work.

On a different note - I love this blog. :)

Thanks!

re: You probably don't need ACCTINFO2.DLL

NedPyle [MSFT] — Tue, 12 Apr 2011 20:14:33 GMT

You and me both. :-D

re: You probably don't need ACCTINFO2.DLL

sgrinker — Tue, 12 Apr 2011 20:12:55 GMT

Ned, thanks for making me take another look at ADAC. I'll admit I was one of those that only gave it a quick glance before. My personal favorite so far... "Convert to LDAP" under the Global Search. If anything, I might come back to ADAC for the quick "cheats" in pulling together some LDAP search criteria.

Thanks!

Steve