0 votes

I noticed that newly created accounts set the useraccountcontrol field to

{PASSWD_NOTREQD|NORMAL_ACCOUNT} = 0x220

rather than:

{NORMAL_ACCOUNT} = 0x200

Is there a place to alter this default setting?

by (950 points)

1 Answer

0 votes
by (18.0k points)

Hello,

The PASSWD_NOTREQD flag is set when no password is specified for the new account. Active Directory doesn't allow user creation if the password is empty and this flag is not set.
To force users to specify passwords for new accounts, you can make the Password property required using Property Patterns.
For more details, please see Generate Initial Password on User Creation (on the 3rd step select the Password cannot be empty option).

See also: Set Default Account Options for New Users.

0

Is the 'No Password Required' flag set after you create a user with a non-empty password? - Yes.

Also - I did try to remove the attribute via the Update User function and the user account control. This selector is disabled for the removal function (not the update).


For what it's worth - we are on AD 2003.

0

Is the 'No Password Required' flag set after you create a user with a non-empty password? - Yes.

Hmm, it looks like a bug. Our QA team will investigate it.

Also - I did try to remove the attribute via the Update User function and the user account control. This selector is disabled for the removal function (not the update).

Ah, of course. Sorry, my bad.
You can do it with the help of a PowerShell script:

Import-Module Adaxes

$userDN = "%distinguishedName%";
$userDomain = $Context.GetObjectDomain($userDN);
$ADS_UF_PASSWD_NOTREQD = 0x00000020;

$user = Get-AdmUser $userDN -Properties userAccountControl -Server $userDomain
$user.userAccountControl = $user.userAccountControl -band (-bnot($ADS_UF_PASSWD_NOTREQD));
Set-AdmUser $user -Server $userDomain
0

I just wanted to express my appreciation for your product and support. Both are outstanding and a pleasure to work with.

0

Thank you! :)

0

Hello,

Yesterday we released a new version of Adaxes (2012.1). Using the new version you can automatically update Account Options of user accounts using a special action - Modify Account Options:

Related questions

0 votes
1 answer

Hi there, Is there a way to change the default view control from TreeView to ListView for new users? We have a setup where, when using listview you can choose only " ... to select the OU between the root and the Users-OU. Example Treeview: Example ListView:

asked May 23, 2018 by GiZmO (50 points)
0 votes
1 answer

Dear Support, Is it possible in "generate default value" section of pattern for multivalued attribute to provide more than 1 value from "must be one of" section? E.g. Pattern ... E" and to have default generated values in web interface "A,C" Thanks for advise!

asked Jul 7, 2020 by Dmytro.Rudyi (920 points)
0 votes
1 answer

We are trying to enforce better consistency for user attribute values in a domain but without overly restricting user input when modifying/creating users. Is it possible to ... to these fields and create Custom Commands to change them which is very tedious.

asked Mar 21, 2019 by Staj (350 points)
0 votes
1 answer

Hi, I am trying to setup a Home Page action in the Help Desk portal to modify a User account, for this i want to specify the default value of a property to be the ... the user account i am modifying to get the default value? Thanks in advance for any help!

asked Dec 1, 2016 by sam.webster (370 points)
0 votes
1 answer

We have a form to used by our HR Reps to create non-employee records. There are two fields on the form that are auto-generated via a property pattern: Full Name ( ... changed to cause this new behavior? Nothing has changed with our property pattern set-up...

asked Aug 30, 2016 by sandramnc (870 points)
3,535 questions
3,225 answers
8,218 comments
547,712 users