mvdw,

Just in case your still interested, here's a pretty good start with the "ADSI" script approach... it reads an INI file in your current directory called "USERS.INI" that is structured like this:

[FILE: USERS.INI]

code:

[USERS]
john.smith=1
jane.doe=1
billybob.sue=1

and this script reads (parses) the INI file and sets their user account to "password never expires" ...

[FILE: SETUSER.KIX]

code:

BREAK ON


$USERFILE="@CURDIR\USERS.INI" ; CHANGE THIS TO YOUR SPECIFICS


$ADS_UF_DONTEXPIREPASSWD = 65536


FOR EACH $USERNAME IN SPLIT(READPROFILESTRING($USERFILE,"USERS",""),CHR(10))
IF $USERNAME
$USER = GETOBJECT("WinNT://@LDOMAIN/$USERNAME,USER")
IF $USER
? "$USERNAME ..."
$USER.PUT("USERFLAGS",$USER.GET("USERFLAGS") | $ADS_UF_DONTEXPIREPASSWD)
$USER.SETINFO() " @SERROR"
$USER = 0
ENDIF
ENDIF
NEXT


EXIT


ummm... it goes without saying that this script really works so excerise caution - you might want to comment-out the $USER.SETINFO() line so that no updates are performed (until you're ready) ... I really hope this script helps your cause ...

-Shawn

[ 19 July 2001: Message edited by: Shawn ]