Resolution
fact
Directory and Resource Administrator 6.x
fact
Directory and Resource Administrator 7.x
symptom
Trigger associated with the UserSetInfo Operation to update the Password Never Expires field does not run.
cause
Triggers associated with the UserSetInfo Operation must be configured as a Pre-Task trigger.
fix
note
Setting the value of the $MCSPasswordDontExpire field to False unchecks the Password Never Expires flag, if checked. In order to check the Password Never Expires flag change the value in the script to True.
Directory and Resource Administrator 6.x
fact
Directory and Resource Administrator 7.x
symptom
Trigger associated with the UserSetInfo Operation to update the Password Never Expires field does not run.
cause
Triggers associated with the UserSetInfo Operation must be configured as a Pre-Task trigger.
fix
The Password Never Expires field in Active Directory or an NT SAM database is called $MCSPasswordDontExpire. Scripts which modify the Password Never Expires flag should be configured as a Pre-Task trigger.
A sample script called PasswordNeverExpires.vbs is available in the Knowledge Depot (requires username and password) in the Triggers and Policy Script section. The script when configured as a Pre-Task trigger, unchecks the Password Never Expires flag of a user account when associated with the UserSetInfo Operation:
note
Setting the value of the $MCSPasswordDontExpire field to False unchecks the Password Never Expires flag, if checked. In order to check the Password Never Expires flag change the value in the script to True.
Additional Information
Formerly known as NETIQKB28453