DisallowChangePassword not working?

Question

Hello,

I followed this tutorial (http://adaxes.com/tutorials_Simplifying ... gUsers.htm) to create service accounts that:
- Cannot change the password
- Password never expires

But, when I create the user the "Password never expires" is correctly set, but "Cannot change the password" is not set on the AD user.

Is this normal?

Answer 1

Hello,

This is a known issue. The thing is that the User cannot change password Account Option exists, but it is ignored by Microsoft AD. The option is set via native permissions in AD.

To set the User cannot change password option for new users, you need to add one more property to the Property Pattern that you've created. The property name is User Cannot Change Password. You need to set it to True. To do this:

1. Launch Adaxes Administration Console.
2. Locate the Property Pattern the you've created following the instructions in the tutorial and select it.
3. Click Add at the top of the Result Pane (located on the right).
4. Select the Show all properties option.
5. Select the User Cannot Change Password property.
   
6. Select True in the Default value drop-down list.
   
7. Save the Property Pattern.

As to the tutorial, we'll fix it in the nearest future.

Comments

Thanks, it works great that way