PasswordLastSet blank

This topic contains 2 replies, has 1 voice, and was last updated by Profile photo of Mik Mik 6 months ago.

  • Author
    Posts
  • #42399
    Profile photo of Mik
    Mik
    Participant

    I try to list all the users with their PasswordLastSet with this

    `get-aduser -filter * -Server FQDN -SearchBase "OU=Test,OU=Test1,DC=domain,DC=local" -properties PasswordLastSet |sort name | ft name, PasswordLastSet`

    problem is the PasswordLastSet is almost always blank.
    If I run the command with different admin credentials I get, sometime, some of the user with the correct data in it.

    I notice looking around a lot of people do this searches with the DirectorySearcher Class.
    It seems to be a permission problem of some sort, but I can't pinpoint exactly what and why a domain admin should be prevented to read this data that is certainly not a secret, especially for a domain admin.

    Anybody can shed some light on the matter?

    • This topic was modified 6 months ago by Profile photo of Mik Mik.
  • #42404
    Profile photo of Mik
    Mik
    Participant

    I found the trick, I was running the PowerShell with the wrong set of credential.
    With all this remoting it's easy to lost the track of who enter where.

    Now it works.

    Sorry for the useless post. I wanted to delete it but I can't find a way.

  • #42406
    Profile photo of Mik
    Mik
    Participant

    Indeed I encounter the same problem in Lync 2015, if I run this command from the shell

    `Enable-CsUser -Identity 'domain.local\ciccio.p' -RegistrarPool "registar.domain.local" -SipAddressType SamAccountName -SipDomain domain.com
    `

    I get an error for insufficient rights, if I enable the same user, from the same server, with the same credential it works fine.

    • This reply was modified 6 months ago by Profile photo of Mik Mik.

You must be logged in to reply to this topic.