Hi, i searched on this forum and could not find it, is there a way to pull the password age of a active directory user object?  I've done it in vbscript (will attach) but want to convert it to Automate instead.

What i want to end up doing is getting the users password age and start sending emails once it is so many days old.

Thanks

Chris

Task Steps: (Right click, Select All, Copy to copy to the clipboard. Steps can then be pasted into the AutoMate Task Builder)
Sub PasswordInfo(USER_ID, First_Name_EN, EMAIL_ADDRESS) 'Get username and set basedn DNBase = ",OU=Users,DC=......." 'bind to user object On Error Resume Next Set objUser = GetObject("LDAP://CN=" & USER_ID & DNBase) If Err.Number = "-2147016656" Then LogFile.WriteLine Now() & "|" & Err.Number & "|Account Missing|" & USER_ID End If Err.Clear On Error GoTo 0 'get and convert pwdlastset Set PwdLastSet = objUser.pwdLastSet NanoSecs = (PwdLastSet.HighPart * (2 ^ 32)) + PwdLastSet.LowPart VBTime = CDate(#1/1/1601# + (NanoSecs / 600000000 / 1440)) ' Returns UTC Time 'see if the account has had its password set SplitDate = Split(VBTime," ",3) UserPwdLastSetDate = SplitDate(0) If UserPwdLastSetDate = "1/1/1601" Then Else 'Convert to readable time and date and set to local Time UserPwdLastSetTime = SplitDate(1) & " " & SplitDate(2) UserPwdLastSetDate = FormatDateTime(UserPwdLastSetDate,vbShortDate) UserPwdLastSetTime = FormatDateTime(UserPwdLastSetTime,vbLongTime) UserPwdLastSetTime = DateAdd("h", -5, UserPwdLastSetTime) 'Get the age of he password PwdAge = DateDiff("d", UserPwdLastSetDate, Date()) 'LogFile.WriteLine USER_ID & "|" & PwdAge 'Execute based on pwd age If (PwdAge > 79) Then 'WScript.Echo USER_ID & " " & PwdAge & " " & EMAIL_ADDRESS LogFile.WriteLine Now() & "Email Sent to " & USER_ID & "|" & PwdAge SendEmail USER_ID,PwdAge,First_Name_EN,Last_Name_EN,EMAIL_ADDRESS End If End If End Sub

Ok, i had fubared the connection and it works and actually gives the date which is nice.  see attached code.

Next question. Is it possible to run a query within automate to show all accounts with a password that is older than say 80 days?

Task Steps: (Right click, Select All, Copy to copy to the clipboard. Steps can then be pasted into the AutoMate Task Builder)
<AMACTIVEDIRECTORY ACTIVITY="get_object_property" LDAPPATH="LDAP://MyADObject" PROPERTYNAME="pwdLastSet" ADOBJECT="user" RESULTVARIABLE="ADUsers" AUTHTYPE="Secure" USERNAME="MyUsername" PASSWORD="MyPassword" />

Hi Chris,

In order to accomplish your request in AutoMate, I would suggest you complete the following;

1. Get ALL Users and Loop
2. Use the Get AD Object "pwdLastSet" under User
3. You can then Compare
4. If it meets our criteria execute the following

Let us know if that works for you.

-------------------------

Ricardo Castaneda | Principal Support Analyst
AutoMate | Division of HelpSystems
HelpSystems, LLC | T: +1.213.738.1700