Resolution
Can DMA change the password flags of user accounts during a migration?
fact
Domain Migration Administrator 7.x
fix
The only options within DMA regarding password migration are as follows:
- Generate a complex password
- Assign password same as user name
- Copy password from source user
When Domain Migration Administrator migrates user accounts, it sets the User must change password at next logon property for each migrated user account. If the Password never expires property is set for a user account, Domain Migration Administrator clears this property for that user account. However, if Domain Migration Administrator is set to copy passwords from source accounts, the password flags of the source accounts are preserved.
The DMA user interface does not provide a built-in way to change the password flags of the user account, such as Password never expires, during the migration. DMA does provide trigger points to launch a script as a pre-migration or post-migration task. You may write a script to change the password flags and launch this script from the trigger within DMA.
note
For more information regarding script triggers in DMA, please refer to https://www.netiq.com/products/dma/whitepapers.asp. Please note that information regarding scripting can also be obtained from Chapter 9 of the DMA and SC User Guide.