Problem:
Using the VAMI you get the error ‘Appliance (OS) root password is expired or is going to expire soon. Please change the root password before installing an update.’
Reset your DSRM or Directory Services Restore Mode password
I recently had to reset a DSRM password as the existing password had been lost. There is absolutely no implications or downside to doing this at all (but there could have been if we needed it and had no access to the DCs).
Continue reading “Reset your DSRM or Directory Services Restore Mode password”
How to find out the password expiry dates for your Active Directory Users
If you want to find out when user’s passwords will expire and export them to a .csv file then this will help. This simple script will list all of your active users, sort the list and list the expiry dates.
Import-Module ActiveDirectory Get-ADUser -filter {Enabled -eq $True -and PasswordNeverExpires -eq $False} –Properties "SamAccountName","msDS-UserPasswordExpiryTimeComputed" | Select-Object -Property "SamAccountName", @{Name="Password Expiry Date"; Expression={[datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed")}} | sort "SamAccountName" | export-csv c:\temp\expire.csv -NoTypeInformation
You can also modify the script so that all you need to do is enter the username and get the expiry date:
Import-Module ActiveDirectory Add-Type -AssemblyName Microsoft.VisualBasic $username = [Microsoft.VisualBasic.Interaction]::InputBox('Enter users SamAccountName', 'SamAccountName') Get-ADUser $username –Properties "SamAccountName","msDS-UserPasswordExpiryTimeComputed" | Select-Object -Property "SamAccountName", @{Name="Password Expiry Date"; Expression={[datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed")}} | sort "SamAccountName" | Out-GridView
If you are running the script from a desktop machine ensure that PowerShell is running as admin and that you have the RSAT tools installed.