Why do I have to import Resources such as Services or Devices to get a Computer Password Aging Repor (NETIQKB47508)

goal
Why do I have to import Resources such as Services or Devices to get a Computer Password Aging Report?

goal
How do I enable the Computer Password Aging Report?

goal
What script do I use to enumerate all the computer objects in the domain and returns the pwdlastset value?

fact
Directory and Resource Administrator 7.x

fix

The Computer Password Aging report is based on the pwdlastset value of computer objects and is stored as a value in Active Directory, therefore there is no technical reason to import a resource from a computer in order to get this value.

The following procedure allows the ability to enable the Computer Password Aging Report, if you are only importing computers by selecting them in the Resources tab.

1. Backup OaRept.mdb. By default, the file is located in Program Files\NetIQ\DRA\Reporting.
2. Open OaRept.mdb with a full version of Access 2000 or later.
3. Click on the Modules tab.
4. Double-click on Import module. This will open the code in Microsoft Visual Basic.
5. On the Edit menu, click Find to search for the function name ImportEaComputers.
6. Under the function, ImportEaComputers, find and replace the following line:
   
   If bJustComputers Or Not bIsAvailable Then
   
   with this line:
   
   If Not bIsAvailable Then
   
7. On the File menu, click Save OaRept.
8. On the Debug menu, click Compile db1.
9. On the File menu, click Close to return to Microsoft Office Access.
10. On the File menu, click Exit to close Microsoft Office Access.
11. Run Reporting again in DRA.

Note: As a second workaround option, there is a script on the knowledge depot called computer_enum_pwdlastset.zip. This script enumerates all the computer objects in the domain and returns the pwdlastset value. 

For more information, contact Technical Support at www.netiq.com/support.

Formerly known as NETIQKB47508