Page 1 of 2 12>
Topic Options
#101539 - 2003-05-27 03:37 PM maxpwage giving incorrect results
daltilio Offline
Fresh Scripter

Registered: 2003-05-27
Posts: 20
[Moderator (Sealeopard): Moved thread from 'Scripts' to 'Gneral' forum due to lack of script in body of inital post and not being a script problem]

I am trying to use the macro @maxpwage. This script worked on windows 2000 and windows 9x until last week when I lowered the maximum password age of the domain from 180 to 173 (we are gradually lowering it to 120). Now the macro always returns 180. I have verified that the max password age of the domain is 173. I have also run 'net accounts' and 173 is returned. I also reset the policy manually using the following MS KB article http://support.microsoft.com/support/kb/articles/q226/2/43.asp.

I also have rebooted the server. And I installed kixtart 4.20 hopeing that would fix it.

I guess my question is what is @maxpwage querrying to always get 180? and how do I fix it?

Thanks,
Brian

[ 27. May 2003, 21:06: Message edited by: sealeopard ]
_________________________
Brian

Top
#101540 - 2003-05-27 03:45 PM Re: maxpwage giving incorrect results
Jochen Administrator Offline
KiX Supporter
*****

Registered: 2000-03-17
Posts: 6380
Loc: Stuttgart, Germany
Sounds like ... ummm ... try to start a test script as follows:


[path\]kix32 /f [path]scriptname.kix


contents of your test script :


break on

@maxpwage

get $_


what is the result ?
_________________________



Top
#101541 - 2003-05-27 03:50 PM Re: maxpwage giving incorrect results
daltilio Offline
Fresh Scripter

Registered: 2003-05-27
Posts: 20
still returns 180

Brian
_________________________
Brian

Top
#101542 - 2003-05-27 03:57 PM Re: maxpwage giving incorrect results
Jochen Administrator Offline
KiX Supporter
*****

Registered: 2000-03-17
Posts: 6380
Loc: Stuttgart, Germany
the /f was in ?

hmmm ...
_________________________



Top
#101543 - 2003-05-27 04:03 PM Re: maxpwage giving incorrect results
daltilio Offline
Fresh Scripter

Registered: 2003-05-27
Posts: 20
This is what I entered:

n:\kix32.exe /f test.kix

I used the script you posted.

This is what I get back when I do net accounts

Force user logoff how long after time expires?: Never
Minimum password age (days): 30
Maximum password age (days): 173
Minimum password length: 6
Length of password history maintained: 5
Lockout threshold: 5
Lockout duration (minutes): 30
Lockout observation window (minutes): 30
Computer role: WORKSTATION
The command completed successfully.


I am stumpted [Confused]

Where does kixtart grab this info from?

-Brian
_________________________
Brian

Top
#101544 - 2003-05-27 04:10 PM Re: maxpwage giving incorrect results
Jochen Administrator Offline
KiX Supporter
*****

Registered: 2000-03-17
Posts: 6380
Loc: Stuttgart, Germany
That's the magic of the latest release ...

It knows what you like to see even before You know [Big Grin]
_________________________



Top
#101545 - 2003-05-27 04:11 PM Re: maxpwage giving incorrect results
Jochen Administrator Offline
KiX Supporter
*****

Registered: 2000-03-17
Posts: 6380
Loc: Stuttgart, Germany
TBH !

It seems to be test.kix in the distribution ... you should always assign a path to script if it is not in PATH [Wink]

But as you see the /f cured your problems,

There is a section in the manual that describes that explicitly

[ 27. May 2003, 16:13: Message edited by: Jochen ]
_________________________



Top
#101546 - 2003-05-27 04:15 PM Re: maxpwage giving incorrect results
daltilio Offline
Fresh Scripter

Registered: 2003-05-27
Posts: 20
ok.

I tried this:

n:\kix32.exe /f n:\test.kix

and I still got 180 not 173.

Where does the macro get this number from?

-Brian
_________________________
Brian

Top
#101547 - 2003-05-27 04:19 PM Re: maxpwage giving incorrect results
Howard Bullock Offline
KiX Supporter
*****

Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
Have you logged off and back on since you changed the domain value? If you are using AD, has the policy updated via replication yet?
_________________________
Home page: http://www.kixhelp.com/hb/

Top
#101548 - 2003-05-27 04:24 PM Re: maxpwage giving incorrect results
Jochen Administrator Offline
KiX Supporter
*****

Registered: 2000-03-17
Posts: 6380
Loc: Stuttgart, Germany
How can this be ?

Quoting you :

quote:
Maximum password age (days): 173

_________________________



Top
#101549 - 2003-05-27 04:47 PM Re: maxpwage giving incorrect results
daltilio Offline
Fresh Scripter

Registered: 2003-05-27
Posts: 20
Howard:

Yes, I have rebooted the pc and the server. I even created a new user to test it on. I still always get 180. I only have one DC in my AD domain, so I don't think replication is a problem. I did issue the secedit /refreshpolicy machine_policy /enforce command and it returned an event ID 1704 indicating a successful policy propegation.

Jochen:

The built in OS command in Win2k, net accounts, returns that the max password age is 173, which is what it is set to in the group policy in AD. However kixtart still thinks it is 180 using @maxpwage.

[Confused] Where does kixtart pull this info from? [Confused]

-Brian
_________________________
Brian

Top
#101550 - 2003-05-27 04:58 PM Re: maxpwage giving incorrect results
Howard Bullock Offline
KiX Supporter
*****

Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
I do not really know the internal mechanisms used by this macro. Maybe Ruud will stop by and give us an answer.

This macro returns the proper 90 days on both my NT4 and Window 2000 AD domains using 4.20 and 4.21.

[ 27. May 2003, 16:59: Message edited by: Howard Bullock ]
_________________________
Home page: http://www.kixhelp.com/hb/

Top
#101551 - 2003-05-27 05:04 PM Re: maxpwage giving incorrect results
Howard Bullock Offline
KiX Supporter
*****

Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
My guess is that the policy is not updated yet regardless of your attempt to force it.
_________________________
Home page: http://www.kixhelp.com/hb/

Top
#101552 - 2003-05-27 05:09 PM Re: maxpwage giving incorrect results
daltilio Offline
Fresh Scripter

Registered: 2003-05-27
Posts: 20
How do I verify that my policy has been updated?

Brian
_________________________
Brian

Top
#101553 - 2003-05-27 05:39 PM Re: maxpwage giving incorrect results
daltilio Offline
Fresh Scripter

Registered: 2003-05-27
Posts: 20
Howard,

I am pretty sure that the policy is being propegated. If I run secpol.msc from my pc, it says that the effctive setting for maximum password age is 173.

Have you ever tried lowering the password setting on your machines and then run the macro again?

-Brian
_________________________
Brian

Top
#101554 - 2003-05-27 09:34 PM Re: maxpwage giving incorrect results
Jochen Administrator Offline
KiX Supporter
*****

Registered: 2000-03-17
Posts: 6380
Loc: Stuttgart, Germany
What happens when you run this testscript directly on a DC ???
_________________________



Top
#101555 - 2003-05-27 10:14 PM Re: maxpwage giving incorrect results
daltilio Offline
Fresh Scripter

Registered: 2003-05-27
Posts: 20
still get 180 [Frown]

I think there may be something else wrong. I did a net accounts on the DC and got 180 too but when I do net accounts on the workstation I get 173. [Confused]

-Brian
_________________________
Brian

Top
#101556 - 2003-05-27 10:23 PM Re: maxpwage giving incorrect results
Jochen Administrator Offline
KiX Supporter
*****

Registered: 2000-03-17
Posts: 6380
Loc: Stuttgart, Germany
Is this a pure AD Domain or mixed mode thing ?
what is the OS of the workstation you test ?
Is the DC on which you run this already 'up-to-date' reagarding these changes ?
Is the DC you did this test the authntifiying Server for the PC you test with ?

Questions over questions [Frown]
_________________________



Top
#101557 - 2003-05-28 02:15 PM Re: maxpwage giving incorrect results
daltilio Offline
Fresh Scripter

Registered: 2003-05-27
Posts: 20
quote:
Is this a pure AD Domain or mixed mode thing ?
This is a mixed mode AD domain

quote:
what is the OS of the workstation you test ?
Tried Windows 2k and Windows 95 (I also installed the Kix RPC service on the Win2k server for the WIN9x clients. Not actually sure if it is really running.)

quote:
Is the DC on which you run this already 'up-to-date' reagarding these changes ?
I would assume so. I only have one DC and one domain.


quote:
Is the DC you did this test the authntifiying Server for the PC you test with ?
Yes. Only one DC and one Domain.

-Brian
_________________________
Brian

Top
#101558 - 2003-05-28 02:31 PM Re: maxpwage giving incorrect results
Jochen Administrator Offline
KiX Supporter
*****

Registered: 2000-03-17
Posts: 6380
Loc: Stuttgart, Germany
I give up !
_________________________



Top
Page 1 of 2 12>


Moderator:  Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 1003 anonymous users online.
Newest Members
StuTheCoder, M_Moore, BeeEm, min_seow, Audio
17884 Registered Users

Generated in 0.074 seconds in which 0.026 seconds were spent on a total of 13 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org