You're doing this the hard way.
Its
far easier to know that computers will change their password automatically after
30 days. Look for any computer account with a password age say greater than 90
days and then take action. Keep in mind also that password age (in the form of
the date the password was last set) is a replicated attribute within a domain,
so you only need to query a single DC.
Roger
--------------------------------------------------------------
Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc.
|
Title: Message
- RE: [ActiveDir] LDAP & LastLogin for Computers Robbie Allen
- RE: [ActiveDir] LDAP & LastLogin for Compu... Roger Seielstad
- RE: [ActiveDir] LDAP & LastLogin for Compu... Steve Rochford
- RE: [ActiveDir] LDAP & LastLogin for Compu... Coleman, Hunter
- Re: [ActiveDir] LDAP & LastLogin for C... Glenn Corbett
- RE: [ActiveDir] LDAP & LastLogin for Compu... England, Christopher M
- RE: [ActiveDir] LDAP & LastLogin for Compu... Coleman, Hunter
- RE: [ActiveDir] LDAP & LastLogin for Compu... Coleman, Hunter
- Re: [ActiveDir] LDAP & LastLogin for C... Glenn Corbett
- Re: [ActiveDir] LDAP & LastLogin f... Jan Wilson
- Re: [ActiveDir] LDAP & LastLog... Glenn Corbett