AnsweredAssumed Answered

PASSWD_CANT_CHANGE AD attribute

Question asked by Ricardo Enrique Perez Andrade

on Oct 5, 2016
Latest reply on Oct 6, 2016 by Ricardo Enrique Perez Andrade

Like • Show 0 Likes0
Comment • 2

Hi,

We are provisioning accounts in AD using the AFX native connector. We are able to create the accounts with no issues, but the customer wants to set the "User cannot change password" option on these accounts. We tried the solution mentioned in this post 000032426 - How to update the LDAP Active Directory Connector UserAccountConrol attribute for use with RSA Via Lifecycle and Governance (L&G) 6.9.1 P08 , which mentions that userAccountControl must have the value "64", but this approach is not working for these accounts.

Can someone have tried a different approach for this?

Thanks,

Ricardo Pérez

1 person has this question

Outcomes

Steven Papaleo Oct 5, 2016 9:12 PM

Hi Ricardo,

When you set the value for "userAccountControl" in your provisioning node you need to use the Property Flag value and not the Value in Decimal. So in your case you need to put the value as "PASSWD_CANT_CHANGE" instead of "64" as you are currently doing.

Actions

Ricardo Enrique Perez Andrade

@ Steven Papaleo on Oct 6, 2016 9:16 AM

Hi Steven,

Thanks for your post, we actually tried sending that parameter and the hexadecimal value also but non of those two options worked. I saw a Microsoft´s post that says there is not possible to set this configuration manipulating userAccountControl attribute https://support.microsoft.com/en-us/kb/305144.

Thanks,

Regards.

Actions

2 Replies

Steven Papaleo Oct 5, 2016 9:12 PM
Mark Correct
Correct Answer
Hi Ricardo,

When you set the value for "userAccountControl" in your provisioning node you need to use the Property Flag value and not the Value in Decimal. So in your case you need to put the value as "PASSWD_CANT_CHANGE" instead of "64" as you are currently doing.
Like • Show 0 Likes0
Actions
- Ricardo Enrique Perez Andrade @ Steven Papaleo on Oct 6, 2016 9:16 AM
  Mark Correct
  Correct Answer
  Hi Steven,
  Thanks for your post, we actually tried sending that parameter and the hexadecimal value also but non of those two options worked. I saw a Microsoft´s post that says there is not possible to set this configuration manipulating userAccountControl attribute https://support.microsoft.com/en-us/kb/305144.
  
  Thanks,
  Regards.
  Like • Show 0 Likes0
  Actions

PASSWD_CANT_CHANGE AD attribute

Outcomes

Related Content

Recommended Content