maxpwage giving incorrect results - KiXtart.org - official site

You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Lounge » maxpwage giving incorrect results

Page 1 of 2

1

Topic Options

#101539 - 2003-05-27 03:37 PM maxpwage giving incorrect results
daltilio daltilio Fresh Scripter Registered: 2003-05-27 Posts: 20	[Moderator (Sealeopard): Moved thread from 'Scripts' to 'Gneral' forum due to lack of script in body of inital post and not being a script problem] I am trying to use the macro @maxpwage. This script worked on windows 2000 and windows 9x until last week when I lowered the maximum password age of the domain from 180 to 173 (we are gradually lowering it to 120). Now the macro always returns 180. I have verified that the max password age of the domain is 173. I have also run 'net accounts' and 173 is returned. I also reset the policy manually using the following MS KB article http://support.microsoft.com/support/kb/articles/q226/2/43.asp. I also have rebooted the server. And I installed kixtart 4.20 hopeing that would fix it. I guess my question is what is @maxpwage querrying to always get 180? and how do I fix it? Thanks, Brian [ 27. May 2003, 21:06: Message edited by: sealeopard ] _________________________ Brian
Top

#101540 - 2003-05-27 03:45 PM Re: maxpwage giving incorrect results
Jochen Jochen KiX Supporter Registered: 2000-03-17 Posts: 6380 Loc: Stuttgart, Germany	Sounds like ... ummm ... try to start a test script as follows: [path\]kix32 /f [path]scriptname.kix contents of your test script : break on @maxpwage get $_ what is the result ? _________________________
Top

#101541 - 2003-05-27 03:50 PM Re: maxpwage giving incorrect results
daltilio daltilio Fresh Scripter Registered: 2003-05-27 Posts: 20	still returns 180 Brian _________________________ Brian
Top

#101542 - 2003-05-27 03:57 PM Re: maxpwage giving incorrect results
Jochen Jochen KiX Supporter Registered: 2000-03-17 Posts: 6380 Loc: Stuttgart, Germany	the /f was in ? hmmm ... _________________________
Top

#101543 - 2003-05-27 04:03 PM Re: maxpwage giving incorrect results
daltilio daltilio Fresh Scripter Registered: 2003-05-27 Posts: 20	This is what I entered: n:\kix32.exe /f test.kix I used the script you posted. This is what I get back when I do net accounts Force user logoff how long after time expires?: Never Minimum password age (days): 30 Maximum password age (days): 173 Minimum password length: 6 Length of password history maintained: 5 Lockout threshold: 5 Lockout duration (minutes): 30 Lockout observation window (minutes): 30 Computer role: WORKSTATION The command completed successfully. I am stumpted Where does kixtart grab this info from? -Brian _________________________ Brian
Top

#101544 - 2003-05-27 04:10 PM Re: maxpwage giving incorrect results
Jochen Jochen KiX Supporter Registered: 2000-03-17 Posts: 6380 Loc: Stuttgart, Germany	That's the magic of the latest release ... It knows what you like to see even before You know _________________________
Top

#101545 - 2003-05-27 04:11 PM Re: maxpwage giving incorrect results
Jochen Jochen KiX Supporter Registered: 2000-03-17 Posts: 6380 Loc: Stuttgart, Germany	TBH ! It seems to be test.kix in the distribution ... you should always assign a path to script if it is not in PATH But as you see the /f cured your problems, There is a section in the manual that describes that explicitly [ 27. May 2003, 16:13: Message edited by: Jochen ] _________________________
Top

#101546 - 2003-05-27 04:15 PM Re: maxpwage giving incorrect results
daltilio daltilio Fresh Scripter Registered: 2003-05-27 Posts: 20	ok. I tried this: n:\kix32.exe /f n:\test.kix and I still got 180 not 173. Where does the macro get this number from? -Brian _________________________ Brian
Top

#101547 - 2003-05-27 04:19 PM Re: maxpwage giving incorrect results
Howard Bullock Howard Bullock KiX Supporter Registered: 2000-09-15 Posts: 5809 Loc: Harrisburg, PA USA	Have you logged off and back on since you changed the domain value? If you are using AD, has the policy updated via replication yet? _________________________ Home page: http://www.kixhelp.com/hb/
Top

#101548 - 2003-05-27 04:24 PM Re: maxpwage giving incorrect results
Jochen Jochen KiX Supporter Registered: 2000-03-17 Posts: 6380 Loc: Stuttgart, Germany	How can this be ? Quoting you : quote: Maximum password age (days): 173 _________________________
Top

#101549 - 2003-05-27 04:47 PM Re: maxpwage giving incorrect results
daltilio daltilio Fresh Scripter Registered: 2003-05-27 Posts: 20	Howard: Yes, I have rebooted the pc and the server. I even created a new user to test it on. I still always get 180. I only have one DC in my AD domain, so I don't think replication is a problem. I did issue the secedit /refreshpolicy machine_policy /enforce command and it returned an event ID 1704 indicating a successful policy propegation. Jochen: The built in OS command in Win2k, net accounts, returns that the max password age is 173, which is what it is set to in the group policy in AD. However kixtart still thinks it is 180 using @maxpwage. Where does kixtart pull this info from? -Brian _________________________ Brian
Top

#101550 - 2003-05-27 04:58 PM Re: maxpwage giving incorrect results
Howard Bullock Howard Bullock KiX Supporter Registered: 2000-09-15 Posts: 5809 Loc: Harrisburg, PA USA	I do not really know the internal mechanisms used by this macro. Maybe Ruud will stop by and give us an answer. This macro returns the proper 90 days on both my NT4 and Window 2000 AD domains using 4.20 and 4.21. [ 27. May 2003, 16:59: Message edited by: Howard Bullock ] _________________________ Home page: http://www.kixhelp.com/hb/
Top

#101551 - 2003-05-27 05:04 PM Re: maxpwage giving incorrect results
Howard Bullock Howard Bullock KiX Supporter Registered: 2000-09-15 Posts: 5809 Loc: Harrisburg, PA USA	My guess is that the policy is not updated yet regardless of your attempt to force it. _________________________ Home page: http://www.kixhelp.com/hb/
Top

#101552 - 2003-05-27 05:09 PM Re: maxpwage giving incorrect results
daltilio daltilio Fresh Scripter Registered: 2003-05-27 Posts: 20	How do I verify that my policy has been updated? Brian _________________________ Brian
Top

#101553 - 2003-05-27 05:39 PM Re: maxpwage giving incorrect results
daltilio daltilio Fresh Scripter Registered: 2003-05-27 Posts: 20	Howard, I am pretty sure that the policy is being propegated. If I run secpol.msc from my pc, it says that the effctive setting for maximum password age is 173. Have you ever tried lowering the password setting on your machines and then run the macro again? -Brian _________________________ Brian
Top

#101554 - 2003-05-27 09:34 PM Re: maxpwage giving incorrect results
Jochen Jochen KiX Supporter Registered: 2000-03-17 Posts: 6380 Loc: Stuttgart, Germany	What happens when you run this testscript directly on a DC ??? _________________________
Top

#101555 - 2003-05-27 10:14 PM Re: maxpwage giving incorrect results
daltilio daltilio Fresh Scripter Registered: 2003-05-27 Posts: 20	still get 180 I think there may be something else wrong. I did a net accounts on the DC and got 180 too but when I do net accounts on the workstation I get 173. -Brian _________________________ Brian
Top

#101556 - 2003-05-27 10:23 PM Re: maxpwage giving incorrect results
Jochen Jochen KiX Supporter Registered: 2000-03-17 Posts: 6380 Loc: Stuttgart, Germany	Is this a pure AD Domain or mixed mode thing ? what is the OS of the workstation you test ? Is the DC on which you run this already 'up-to-date' reagarding these changes ? Is the DC you did this test the authntifiying Server for the PC you test with ? Questions over questions _________________________
Top

#101557 - 2003-05-28 02:15 PM Re: maxpwage giving incorrect results
daltilio daltilio Fresh Scripter Registered: 2003-05-27 Posts: 20	quote: Is this a pure AD Domain or mixed mode thing ? This is a mixed mode AD domain quote: what is the OS of the workstation you test ? Tried Windows 2k and Windows 95 (I also installed the Kix RPC service on the Win2k server for the WIN9x clients. Not actually sure if it is really running.) quote: Is the DC on which you run this already 'up-to-date' reagarding these changes ? I would assume so. I only have one DC and one domain. quote: Is the DC you did this test the authntifiying Server for the PC you test with ? Yes. Only one DC and one Domain. -Brian _________________________ Brian
Top

#101558 - 2003-05-28 02:31 PM Re: maxpwage giving incorrect results
Jochen Jochen KiX Supporter Registered: 2000-03-17 Posts: 6380 Loc: Stuttgart, Germany	I give up ! _________________________
Top

Page 1 of 2

1

Previous Topic

Previous Topic View All Topics

View All Topics

Index Next Topic

Next Topic

Moderator: Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart

Hop to:

Shout Box

Who's Online

0 registered and 1003 anonymous users online.

Newest Members

StuTheCoder, M_Moore, BeeEm, min_seow, Audio
17884 Registered Users

Generated in 0.083 seconds in which 0.032 seconds were spent on a total of 13 queries. Zlib compression enabled.

click tracking