Retour
-
Titre
Does Quest Authentication Services (QAS) update the 'pwdlastset' attribute of the computer object -
Description
It may be a requirement to clean up old computer accounts that have not been online for a while. A script may be used for this purpose that checks the pwdlastset attribute of the computer object in AD and then deletes all the accounts that did not update this attribute in a certain number of days.
-
Résolution
Byy default, vasd changes the Active Directory password every 30 days. Active Directory will update the pwdlastset attribute when the password is changed.
-
Informations supplémentaires
Note: pwdlastset doesnt register when an administrator does a password set like during the initial join.