Setting account expires date in Active Directory

[Stac]

I have a web service which provides updates / additions to
active directory. I can add accounts, change values etc,
for everything I need to except the accountexpires field. I
have been searching for this one for weeks.
I am using the DirectoryEntry & DirectorySearcher classes
as follows:

'strCN is the username I am editing
'myDirectoryEntry is a directory entry object to our domain

myDirectorySearcher.SearchRoot = myDirectoryEntry
myDirectorySearcher.Filter = ("(&(objectClass=user)
(samaccountname=" & strCN & "))")
Try
Dim UserResult As SearchResult = myDirectorySearcher.
FindOne
Dim ADUser As New DirectoryEntry(UserResult.
GetDirectoryEntry.NativeObject)
If ADUser.Exists(ADUser.Path.ToString) Then
' I set other values here like:
ADUser.Invoke("Put", "sn", strSN) 'strSN is surname
ADUser.Invoke("Put", "mail", strMail) 'email address
ADUser.Invoke("Put", "homedirectory", strHomeDirectory)
ADUser.CommitChanges() ' apply changes
ADUser.Invoke("SetPassword", strPw) ' set password etc

I can also add the user to groups etc. I have tried a
number of ways to apply an expiry date to the account with
no success. eg.
ADUser.Invoke("Put", "AccountExpirationDate", dateExpires)
or
ADUser.Properties("AccountExpirationDate").Value =
dateExpires
have also tried using the 'toFileTime' conversion.
nb. This is different to the password expiry date that can
be set via the user flags.
Anyone that can assist me on this would be greatly
appreciated.

Stacy

[Rahul Kapoor]

how about using WMI

Set objUser = GetObject _
("LDAP://cn=MyerKen,ou=Management,dc=NA,dc=fabrikam,dc=com" )
objUser.AccountExpirationDate = "01/01/2007"
objUser.SetInfo

more at

http://www.microsoft.com/technet/tre...er/ScrUG82.asp

Rahul
r_*****@nospam.yahoo.com

"Stac" <bo***@usq.edu.au> wrote in message
news:05****************************@phx.gbl...

I have a web service which provides updates / additions to
active directory. I can add accounts, change values etc,
for everything I need to except the accountexpires field. I
have been searching for this one for weeks.
I am using the DirectoryEntry & DirectorySearcher classes
as follows:

'strCN is the username I am editing
'myDirectoryEntry is a directory entry object to our domain

myDirectorySearcher.SearchRoot = myDirectoryEntry
myDirectorySearcher.Filter = ("(&(objectClass=user)
(samaccountname=" & strCN & "))")
Try
Dim UserResult As SearchResult = myDirectorySearcher.
FindOne
Dim ADUser As New DirectoryEntry(UserResult.
GetDirectoryEntry.NativeObject)
If ADUser.Exists(ADUser.Path.ToString) Then
' I set other values here like:
ADUser.Invoke("Put", "sn", strSN) 'strSN is surname
ADUser.Invoke("Put", "mail", strMail) 'email address
ADUser.Invoke("Put", "homedirectory", strHomeDirectory)
ADUser.CommitChanges() ' apply changes
ADUser.Invoke("SetPassword", strPw) ' set password etc

I can also add the user to groups etc. I have tried a
number of ways to apply an expiry date to the account with
no success. eg.
ADUser.Invoke("Put", "AccountExpirationDate", dateExpires)
or
ADUser.Properties("AccountExpirationDate").Value =
dateExpires
have also tried using the 'toFileTime' conversion.
nb. This is different to the password expiry date that can
be set via the user flags.
Anyone that can assist me on this would be greatly
appreciated.

Stacy

[Stac]

thnx Rahul
however, how do you authenticate the command doing this
within VB.net? I have an authenticated connection setup
through the directoryentry class. But the wmi script does
not utilise those credentials. While I can enter this
script inside VB.net and it appears to work, it returns
'general access denied' error. I tried entering in the user
credentials in the connection string as we used to in vb6,
but this didn't work either. Any ideas / thoughts???

thnx
Stac

-----Original Message-----
how about using WMI

Set objUser = GetObject _
("LDAP://cn=MyerKen,ou=Management,dc=NA,dc=fabrikam, dc=com")objUser.AccountExpirationDate = "01/01/2007"
objUser.SetInfo

more at

http://www.microsoft.com/technet/treeview/default.asp? url=/technet/ScriptCenter/user/ScrUG82.asp
Rahul
r_*****@nospam.yahoo.com

"Stac" <bo***@usq.edu.au> wrote in message
news:05****************************@phx.gbl...

I have a web service which provides updates / additions to active directory. I can add accounts, change values etc,
for everything I need to except the accountexpires field. I have been searching for this one for weeks.
I am using the DirectoryEntry & DirectorySearcher classes as follows:

'strCN is the username I am editing
'myDirectoryEntry is a directory entry object to our domain
myDirectorySearcher.SearchRoot = myDirectoryEntry
myDirectorySearcher.Filter = ("(&(objectClass=user)
(samaccountname=" & strCN & "))")
Try
Dim UserResult As SearchResult = myDirectorySearcher.
FindOne
Dim ADUser As New DirectoryEntry(UserResult.
GetDirectoryEntry.NativeObject)
If ADUser.Exists(ADUser.Path.ToString) Then
' I set other values here like:
ADUser.Invoke("Put", "sn", strSN) 'strSN is surname
ADUser.Invoke("Put", "mail", strMail) 'email address
ADUser.Invoke("Put", "homedirectory", strHomeDirectory) ADUser.CommitChanges() ' apply changes
ADUser.Invoke("SetPassword", strPw) ' set password etc
I can also add the user to groups etc. I have tried a
number of ways to apply an expiry date to the account with no success. eg.
ADUser.Invoke("Put", "AccountExpirationDate", dateExpires) or
ADUser.Properties("AccountExpirationDate").Value =
dateExpires
have also tried using the 'toFileTime' conversion.
nb. This is different to the password expiry date that can be set via the user flags.
Anyone that can assist me on this would be greatly
appreciated.

Stacy

.

[Rahul Kapoor]

you can specify the user name when creating the WMI object in the moniker
string it self..... like thus...

Set objWMIService = GetObject("winmgmts:" & _
"{impersonationLevel=Impersonate}!\\" & Computer_B &
"\root\cimv2")
more at
http://msdn.microsoft.com/library/de...e_computer.asp

HTH
Rahul
r_*****@yahoo.nospam.com
"Stac" <an*******@discussions.microsoft.com> wrote in message
news:00****************************@phx.gbl...

thnx Rahul
however, how do you authenticate the command doing this
within VB.net? I have an authenticated connection setup
through the directoryentry class. But the wmi script does
not utilise those credentials. While I can enter this
script inside VB.net and it appears to work, it returns
'general access denied' error. I tried entering in the user
credentials in the connection string as we used to in vb6,
but this didn't work either. Any ideas / thoughts???

thnx
Stac

-----Original Message-----
how about using WMI

Set objUser = GetObject _
("LDAP://cn=MyerKen,ou=Management,dc=NA,dc=fabrikam,

dc=com")

objUser.AccountExpirationDate = "01/01/2007"
objUser.SetInfo

more at

http://www.microsoft.com/technet/treeview/default.asp?

url=/technet/ScriptCenter/user/ScrUG82.asp

Rahul
r_*****@nospam.yahoo.com

"Stac" <bo***@usq.edu.au> wrote in message
news:05****************************@phx.gbl...

I have a web service which provides updates / additions to active directory. I can add accounts, change values etc,
for everything I need to except the accountexpires field. I have been searching for this one for weeks.
I am using the DirectoryEntry & DirectorySearcher classes as follows:

'strCN is the username I am editing
'myDirectoryEntry is a directory entry object to our domain
myDirectorySearcher.SearchRoot = myDirectoryEntry
myDirectorySearcher.Filter = ("(&(objectClass=user)
(samaccountname=" & strCN & "))")
Try
Dim UserResult As SearchResult = myDirectorySearcher.
FindOne
Dim ADUser As New DirectoryEntry(UserResult.
GetDirectoryEntry.NativeObject)
If ADUser.Exists(ADUser.Path.ToString) Then
' I set other values here like:
ADUser.Invoke("Put", "sn", strSN) 'strSN is surname
ADUser.Invoke("Put", "mail", strMail) 'email address
ADUser.Invoke("Put", "homedirectory", strHomeDirectory) ADUser.CommitChanges() ' apply changes
ADUser.Invoke("SetPassword", strPw) ' set password etc
I can also add the user to groups etc. I have tried a
number of ways to apply an expiry date to the account with no success. eg.
ADUser.Invoke("Put", "AccountExpirationDate", dateExpires) or
ADUser.Properties("AccountExpirationDate").Value =
dateExpires
have also tried using the 'toFileTime' conversion.
nb. This is different to the password expiry date that can be set via the user flags.
Anyone that can assist me on this would be greatly
appreciated.

Stacy

.

[Stac]

Well I managed to work it out, finally. It appears that if
you use the NativeObject property, you can call the native
ADSI calls, eg.
ADUser.NativeObject.AccountExpirationDate = "11/11/2003"
So all is good!! thnx Rahul for your options.
Stacy

-----Original Message-----
I have a web service which provides updates / additions to
active directory. I can add accounts, change values etc,
for everything I need to except the accountexpires field. Ihave been searching for this one for weeks.
I am using the DirectoryEntry & DirectorySearcher classes
as follows:

'strCN is the username I am editing
'myDirectoryEntry is a directory entry object to our domain
myDirectorySearcher.SearchRoot = myDirectoryEntry
myDirectorySearcher.Filter = ("(&(objectClass=user)
(samaccountname=" & strCN & "))")
Try
Dim UserResult As SearchResult = myDirectorySearcher.
FindOne
Dim ADUser As New DirectoryEntry(UserResult.
GetDirectoryEntry.NativeObject)
If ADUser.Exists(ADUser.Path.ToString) Then
' I set other values here like:
ADUser.Invoke("Put", "sn", strSN) 'strSN is surname
ADUser.Invoke("Put", "mail", strMail) 'email address
ADUser.Invoke("Put", "homedirectory", strHomeDirectory) ADUser.CommitChanges() ' apply changes
ADUser.Invoke("SetPassword", strPw) ' set password etc

I can also add the user to groups etc. I have tried a
number of ways to apply an expiry date to the account with
no success. eg.
ADUser.Invoke("Put", "AccountExpirationDate", dateExpires)
or
ADUser.Properties("AccountExpirationDate").Valu e =
dateExpires
have also tried using the 'toFileTime' conversion.
nb. This is different to the password expiry date that can
be set via the user flags.
Anyone that can assist me on this would be greatly
appreciated.

Stacy

.