code:

---

Break On 

; REQUIRES:
;
; KIXTART 4.02
; KIXFORMS BUILD 8
; WINDOWS 2K/XP
;
  
$Form = CreateObject("Kixtart.Form")
 
$Form.Caption			= "Modify User Details - KiXtart"
$Form.ScaleHeight		= 506
$Form.ScaleWidth		= 600
$Form.FontName			= "Arial"
$Form.FontSize			= 9
$Form.Center
 
$fraBanner 			= $Form.PictureBox
$fraBanner.BackColor		= $Form.RGB(255,255,255)
$fraBanner.Height 		= 137
$fraBanner.Left			= 10
$fraBanner.Top			= 10
$fraBanner.Width		= 585
 
$fraDetails			= $Form.Frame("Details")
$fraDetails.Height 		= 345
$fraDetails.Left 		= 8
$fraDetails.Top 		= 152
$fraDetails.Width 		= 585
 
$txtUsername			= $fraDetails.TextBox
$txtUsername.Height		= 25
$txtUsername.Left		= 104
$txtUsername.Top		= 24
$txtUsername.Text		= ""
$txtUsername.Width		= 161
 
$cmdFindUser			= $fraDetails.CommandButton("Find User!")
$cmdFindUser.Default		= 1 ; True
$cmdFindUser.FontName		= "Comic Sans MS"
$cmdFindUser.FontSize		= 12
$cmdFindUser.FontBold		= 1
$cmdFindUser.Left		= 272
$cmdFindUser.Top		= 24
$cmdFindUser.Width		= 129
$cmdFindUser.OnClick		= "cmdFindUser_Click()"
 
$txtDisplayName			= $fraDetails.TextBox
$txtDisplayName.Height		= 25
$txtDisplayName.Left		= 104
$txtDisplayName.TabStop		= 0 ; False
$txtDisplayName.Top		= 56
$txtDisplayName.Width		= 297
$txtDisplayName.Enabled		= 1
$txtDisplayName.BackColor	= $Form.BackColor
 
$lblDisplayName			= $fraDetails.Label("Full Name:")
$lblDisplayName.Width		= 75
$lblDisplayName.Left		= $txtDisplayName.Left - $lblDisplayName.Width
$lblDisplayName.Top		= $txtDisplayName.Top
 
$txtPassword			= $fraDetails.TextBox
$txtPassword.Height		= 25
$txtPassword.Left		= 104
$txtPassword.PasswordChar 	= ""
$txtPassword.Top		= 88
$txtPassword.Width		= 161
$txtPassword.Enabled		= 0
 
$cmdSetPassword			= $fraDetails.CommandButton("Set Password!")
$cmdSetPassword.FontName	= "Comic Sans MS"
$cmdSetPassword.FontSize	= 12
$cmdSetPassword.FontBold	= 1
$cmdSetPassword.Left		= 272
$cmdSetPassword.Top		= 88
$cmdSetPassword.Width		= 129
$cmdSetPassword.Enabled		= 0
$cmdSetPassword.OnClick		= "cmdSetPassword_Click()"
 
$txtExpiryDate			= $fraDetails.TextBox
$txtExpiryDate.Height		= 25
$txtExpiryDate.Left		= 104
$txtExpiryDate.Top		= 120
$txtExpiryDate.Width		= 161
$txtExpiryDate.Enabled		= 0
 
$lblPassword			= $fraDetails.Label("Password:")
$lblPassword.Width		= 75
$lblPassword.Left		= $txtPassword.Left - $lblPassword.Width
$lblPassword.Top		= $txtPassword.Top
 
$lblExpiryDate			= $fraDetails.Label("Expiry Date:")
$lblExpiryDate.Width		= 75
$lblExpiryDate.Left		= $txtExpiryDate.Left - $lblExpiryDate.Width
$lblExpiryDate.Top		= $txtExpiryDate.Top
 
$cmdChangeExpiryDate 		= $fraDetails.CommandButton("Change Date!")
$cmdChangeExpiryDate.FontName	= "Comic Sans MS"
$cmdChangeExpiryDate.FontSize	= 12
$cmdChangeExpiryDate.FontBold	= 1
$cmdChangeExpiryDate.Left	= 272
$cmdChangeExpiryDate.Top	= 120
$cmdChangeExpiryDate.Width	= 129
$cmdChangeExpiryDate.OnClick	= "cmdChangeExpiryDate_Click()"
$cmdChangeExpiryDate.Enabled	= 0
 
$lstGroups 			= $fraDetails.ListBox
$lstGroups.Height		= 134
$lstGroups.Left			= 104
$lstGroups.Top			= 152
$lstGroups.Width		= 297
$lstGroups.Enabled		= 0
 
$lblGroups 			= $fraDetails.Label("Groups:")
$lblGroups.Width		= 75
$lblGroups.Left			= $lstGroups.Left - $lblGroups.Width
$lblGroups.Top			= $lstGroups.Top
 
$txtBadLoginCount 		= $fraDetails.TextBox
$txtBadLoginCount.Height	= 25
$txtBadLoginCount.Left		= 104
$txtBadLoginCount.TabStop 	= 0 ; False
$txtBadLoginCount.Top		= 296
$txtBadLoginCount.Width		= 161
$txtBadLoginCount.BackColor	= $Form.BackColor
 
$lblBadLoginCount 		= $fraDetails.Label("Bad Logins:")
$lblBadLoginCount.Width		= 75
$lblBadLoginCount.Left		= $txtBadLoginCount.Left - $lblBadLoginCount.Width
$lblBadLoginCount.Top		= $txtBadLoginCount.Top
 
$cmdExit	 		= $fraDetails.CommandButton("Exit!")
$cmdExit.FontName		= "Comic Sans MS"
$cmdExit.FontSize		= 12
$cmdExit.FontBold		= 1
$cmdExit.Top			= 296
$cmdExit.Width			= 129
$cmdExit.Left			= 445
$cmdExit.OnClick		= "quit()"
 
$fraStatus			= $fraDetails.Frame
$fraStatus.BackColor		= $Form.BackColor
$fraStatus.Caption		= "Account Status"
$fraStatus.Height		= 105
$fraStatus.Left			= 420 ; 416
$fraStatus.Top			= 20 ; 224
$fraStatus.Width		= 155
 
$chkAccountDisabled		= $fraStatus.CheckBox("Account Disabled")
$chkAccountDisabled.Left	= 10
$chkAccountDisabled.TabStop	= 0 ; False
$chkAccountDisabled.Top		= 24
$chkAccountDisabled.OnClick	= "chkAccountDisabled_Click()"
$chkAccountDisabled.Enabled	= 0
 
$chkAccountLocked		= $fraStatus.CheckBox("Account Locked")
$chkAccountLocked.Caption	= "Account Locked"
$chkAccountLocked.Left		= 10
$chkAccountLocked.TabStop	= 0 ; False
$chkAccountLocked.Top		= 56
$chkAccountLocked.OnClick	= "chkAccountLocked_Click()"
$chkAccountLocked.Enabled	= 0
 
$lblUsername			= $fraDetails.Label
$lblUsername.Caption		= "Username:"
$lblUsername.Height		= $txtUsername.Height
$lblUsername.Width		= 75
$lblUsername.Left		= $txtUsername.Left - $lblUsername.Width
$lblUsername.Top		= $txtUsername.Top
  
; Draw on the banner
  
$fraBanner.FontSize = 16
$fraBanner.FontName = "verdana"
$fraBanner.FontSize = 28
$fraBanner.ForeColor = $Form.RGB(100,200,200)
$fraBanner.PrintXY(23,10,"Modify User Details")
$fraBanner.ForeColor = 0
$fraBanner.PrintXY(20,7,"Modify User Details")
$fraBanner.FontSize = 12
$fraBanner.ForeColor = $Form.RGB(0,100,100)
$fraBanner.PrintXY(23,58,"Powered by KiXtart v@KIX and Kixforms Build 8")
$fraBanner.FontBold = 1
$fraBanner.PrintXY(23,80,"Welcome @USERID")
$fraBanner.FontBold = 0
$fraBanner.FontSize = 10
$fraBanner.ForeColor = $Form.RGB(0,100,100)

Dim $strUserName
Dim $strUserPath
 
$txtUsername.SelLength = Len($txtUsername.Text)
 
$Form.Show
$txtUsername.SetFocus

While $Form.Visible
 $=Execute($Form.DoEvents)
Loop
 
Exit 1
 
Function cmdFindUser_Click()
 
    Dim $Wait
 
    $Wait = CreateObject("Kixtart.Form")
    $Wait.Caption = "One moment please..."
    $Wait.ScaleWidth = 500
    $Wait.ScaleHeight = 100
    $Wait.FontSize = 14
    $Wait.FontName = "Arial"
    $Wait.PrintXY(30,30,"Searching Active Directory, one moment please...")
    $Wait.Center

    Dim $adsUser,$adsGroup
     
    If $txtUsername.Text = ""
        $= $Form.MsgBox("You must specify a username before clicking Find.", "Username invalid")
        $txtUsername.Text = $strUserName
        Exit Sub
    Else
        $strUserName = $txtUsername.Text
    Endif
 
    $Wait.Show

    $strUserPath = "WinNT://@LDOMAIN/$strUserName,User"
 
    $adsUser = GetObject($strUserPath)
 
    If Not $adsUser
 
        ; User does not exist
 
        $= $Form.MsgBox("A user called (" + $txtUsername.Text + ") does not exist.", "Username invalid")
     
        ; Disable the controls
 
        $chkAccountDisabled.Enabled = 0
        $cmdSetPassword.Enabled = 0
        $cmdChangeExpiryDate.Enabled = 0
        $txtPassword.Enabled = 0
        $cmdChangeExpiryDate.Enabled = 0
        $txtPassword.Text = ""
        $txtDisplayName.Text = ""
        $txtExpiryDate.Text = ""
        $txtBadLoginCount.Text = ""
        $lstGroups.Clear
 
    Else
 
        $txtPassword.Text = ""
        $txtDisplayName.Text = ""
        $txtExpiryDate.Text = ""
        $txtBadLoginCount.Text = ""  
        $lstGroups.Clear
        $lstGroups.
 
       ; User exists so bind to it
 
        $adsUser.GetInfo
       
        $txtDisplayName.Text = $adsUser.FullName
        $txtExpiryDate.Text = $adsUser.AccountExpirationDate
 
        If $adsUser.AccountDisabled
 
           ; Check the disabled box
           $chkAccountDisabled.Value = 1
 
        Else
 
            ; Uncheck the disabled box
            $chkAccountDisabled.Value = 0
 
        EndIf
 
        If $adsUser.IsAccountLocked
 
            ; Check the locked box
 
           $chkAccountLocked.Value = 1
 
            ; Enable the checkbox so that the account can be unlocked
            $chkAccountLocked.Enabled = True
 
        Else
 
           ; Uncheck the locked box
           $chkAccountLocked.Value = 0
 
        EndIf
 
        For Each $adsGroup In $adsUser.Groups
            $lstGroups.AddItem ($adsGroup.Name)
        Next
 
        $strBLC = $adsUser.BadLoginCount
        If @ERROR
            $txtBadLoginCount.Text = 0
        Else
            $txtBadLoginCount.Text = $strBLC
        EndIf
         
        ;Enable the controls
 
        $chkAccountDisabled.Enabled = 1
        $cmdSetPassword.Enabled = 1
        $cmdChangeExpiryDate.Enabled = 1
        $txtPassword.Enabled = 1
        $txtExpiryDate.Enabled = 1
        $lstGroups.Enabled = 1        
        $adsUser = 0
        $adsGroup = 0
        $txtUsername.SetFocus  
 
    Endif
 
    $Form.Refresh
    $txtUsername.SetFocus  
  
EndFunction
 
Function chkAccountDisabled_Click()
 
    Dim $adsUser
 
    $adsUser = GetObject($strUserPath)
    $adsUser.GetInfo
 
    If $chkAccountDisabled.Value = 0
 
        ; Enable account
 
        $adsUser.AccountDisabled = 0
        $adsUser.SetInfo
        $= $Form.MsgBox("The user (" + $strUserName + ") has been enabled.", "User enabled")
 
    Else
 
        ; Disable Account
 
        $adsUser.AccountDisabled = 1
        $adsUser.SetInfo
        $= $Form.MsgBox("The user (" + $strUserName + ") has been disabled.", "User disabled")
 
    EndIf
     
    $adsUser = 0
 
EndFunction
 
Function chkAccountLocked_Click()
 
    Dim $adsUser
    
    If $chkAccountLocked.Value = 0
        ; Unlock the account
        $adsUser = GetObject($strUserPath)
        $adsUser.GetInfo
        $adsUser.IsAccountLocked = 0
        $adsUser.SetInfo
        $= $Form.MsgBox("The user (" + $strUserName + ") has been unlocked.", "User enabled")
    EndIf
    
    ; Disable the checkbox
 
    $chkAccountLocked.Enabled = 0
    
    $adsUser = Nothing
 
EndFunction
 
Function cmdSetPassword_Click()
 
    $adsUser = GetObject($strUserPath)
    $adsUser.GetInfo
    
    If $txtPassword.Text = ""
        $= $Form.MsgBox("The password cannot be empty.", "User password change", 1)
    Else
     If Len($txtPassword.Text) < 6
        $= $Form.MsgBox("The password cannot be less than 6 characters long.", "User password change", 1)
     Else
        $adsUser.SetPassword($txtPassword.Text)
        $= $Form.MsgBox("The password has been changed to (" + $txtPassword.Text + ").", "User password change", 1)
     EndIf
    EndIf
 
    $txtPassword.Text = ""
    $adsUser = Nothing
 
EndFunction
 
Function cmdChangeExpiryDate_Click()
 
    Dim $adsUser
 
    $adsUser = GetObject($strUserPath)
    $adsUser.GetInfo
    
    If $txtExpiryDate.Text = ""
        $= $Form.MsgBox("The expiry date cannot be empty.", "User expiry date change", 1)
        $txtExpiryDate.Text = $adsUser.AccountExpirationDate
    Else
        $adsUser.AccountExpirationDate = $txtExpiryDate.Text
        $adsUser.SetInfo
        If @ERROR
            $= $Form.MsgBox("The expiry date has not been changed due to an error.", "User expiry date change")
        Else
            $= $Form.MsgBox("The expiry date been changed to (" + $txtExpiryDate.Text + ").", "User expiry date change")
        EndIf
    EndIf
    
    $adsUser = Nothing
 
EndFunction

---

code:

---

  
BREAK ON

; REQUIRES:
;
; KIXTART 4.02
; KIXFORMS BUILD 27
; WINDOWS 2K/XP
;
; WRITTEN BY SHAWN TASSIE
; MODIFIED BY BEN DULANEY
 
; Find out if User is an Administrator, if so enable all features
$ADMINUSER=0
$ADSUSER1=GETOBJECT("WinNT://@LDOMAIN/@USERID,User")
FOR EACH $ELEMENT IN $ADSUSER1.GROUPS
	IF $ELEMENT.NAME="DOMAIN ADMINS"
		$ADMINUSER=1
	ENDIF
NEXT

$FORM = CREATEOBJECT("Kixtart.FORM")

$FORM.CAPTION			= "User Manager"
$FORM.SCALEHEIGHT		= 402
$FORM.SCALEWIDTH		= 600
$FORM.FONTNAME			= "Arial"
$FORM.FONTSIZE			= 9
$FORM.CENTER

$fraBanner 			= $FORM.PictureBox
$fraBanner.BACKCOLOR		= $FORM.RGB(255,255,255)
$fraBanner.HEIGHT 		= 70
$fraBanner.LEFT			= 10
$fraBanner.TOP			= 10
$fraBanner.WIDTH		= 585

$fraDetails			= $FORM.Frame("Details")
$fraDetails.HEIGHT 		= 300
$fraDetails.LEFT 		= 8
$fraDetails.TOP 		= 95
$fraDetails.WIDTH 		= 585
 
$txtUsername			= $fraDetails.TextBox
$txtUsername.HEIGHT		= 19
$txtUsername.LEFT		= 104
$txtUsername.TOP		= 24
$txtUsername.Text		= ""
$txtUsername.WIDTH		= 161
 
$cmdFindUser			= $fraDetails.CommandButton("Find User")
$cmdFindUser.DEFAULT		= 1 ; True
$cmdFindUser.FONTNAME		= "Arial"
$cmdFindUser.FONTSIZE		= 10
$cmdFindUser.FONTBOLD		= 1
$cmdFindUser.LEFT		= 272
$cmdFindUser.TOP		= 24
$cmdFindUser.WIDTH		= 129
$cmdFindUser.HEIGHT		= 19
$cmdFindUser.OnClick		= "cmdFindUser_Click()"
 
$txtDisplayName			= $fraDetails.TextBox
$txtDisplayName.HEIGHT		= 19
$txtDisplayName.LEFT		= 104
$txtDisplayName.TabStop		= 0 ; False
$txtDisplayName.TOP		= 56
$txtDisplayName.WIDTH		= 297
$txtDisplayName.Enabled		= 1
$txtDisplayName.BACKCOLOR	= $FORM.BACKCOLOR
 
$lblDisplayName			= $fraDetails.Label("Full Name:")
$lblDisplayName.WIDTH		= 75
$lblDisplayName.LEFT		= $txtDisplayName.LEFT - $lblDisplayName.WIDTH
$lblDisplayName.TOP		= $txtDisplayName.TOP
 
$txtPassword			= $fraDetails.TextBox
$txtPassword.HEIGHT		= 19
$txtPassword.LEFT		= 104
$txtPassword.PasswordChar 	= ""
$txtPassword.TOP		= 88
$txtPassword.WIDTH		= 161
$txtPassword.Enabled		= 0
 
$cmdSetPassword			= $fraDetails.CommandButton("Set Password")
$cmdSetPassword.FONTNAME	= "Arial"
$cmdSetPassword.FONTSIZE	= 10
$cmdSetPassword.FONTBOLD	= 1
$cmdSetPassword.LEFT		= 272
$cmdSetPassword.TOP		= 88
$cmdSetPassword.WIDTH		= 129
$cmdSetPassword.HEIGHT		= 19
$cmdSetPassword.Enabled		= 0
$cmdSetPassword.OnClick		= "cmdSetPassword_Click()"
 
$txtExpiryDate			= $fraDetails.TextBox
$txtExpiryDate.HEIGHT		= 19
$txtExpiryDate.LEFT		= 104
$txtExpiryDate.TOP		= 120
$txtExpiryDate.WIDTH		= 161
$txtExpiryDate.Enabled		= 0
 
$lblPassword			= $fraDetails.Label("Password:")
$lblPassword.WIDTH		= 75
$lblPassword.LEFT		= $txtPassword.LEFT - $lblPassword.WIDTH
$lblPassword.TOP		= $txtPassword.TOP
 
$lblExpiryDate			= $fraDetails.Label("Expire Date:")
$lblExpiryDate.WIDTH		= 75
$lblExpiryDate.LEFT		= $txtExpiryDate.LEFT - $lblExpiryDate.WIDTH
$lblExpiryDate.TOP		= $txtExpiryDate.TOP
 
$cmdChangeExpiryDate 		= $fraDetails.CommandButton("Change Date")
$cmdChangeExpiryDate.FONTNAME	= "Arial"
$cmdChangeExpiryDate.FONTSIZE	= 10
$cmdChangeExpiryDate.FONTBOLD	= 1
$cmdChangeExpiryDate.LEFT	= 272
$cmdChangeExpiryDate.TOP	= 120
$cmdChangeExpiryDate.WIDTH	= 129
$cmdChangeExpiryDate.HEIGHT	= 19
$cmdChangeExpiryDate.OnClick	= "cmdChangeExpiryDate_Click()"
$cmdChangeExpiryDate.Enabled	= 0
 
$lstGroups 			= $fraDetails.ListBox
$lstGroups.HEIGHT		= 134
$lstGroups.LEFT			= 104
$lstGroups.TOP			= 152
$lstGroups.WIDTH		= 297
$lstGroups.Enabled		= 0
 
$lblGroups 			= $fraDetails.Label("Groups:")
$lblGroups.WIDTH		= 75
$lblGroups.LEFT			= $lstGroups.LEFT - $lblGroups.WIDTH
$lblGroups.TOP			= $lstGroups.TOP
 
$txtBadLoginCount 		= $fraDetails.TextBox
$txtBadLoginCount.HEIGHT	= 19
$txtBadLoginCount.LEFT		= 9 + 420 + 75
$txtBadLoginCount.TabStop 	= 0 ; False
$txtBadLoginCount.TOP		= 26 + 20 + 105
$txtBadLoginCount.WIDTH		= 20
$txtBadLoginCount.BACKCOLOR	= $FORM.BACKCOLOR
 
$lblBadLoginCount 		= $fraDetails.Label("Bad Logins:")
$lblBadLoginCount.WIDTH		= 75
$lblBadLoginCount.LEFT		= 9 + 420	; X + Y (Y = $fraStatus.LEFT)
$lblBadLoginCount.TOP		= 26 + 20 + 105	; X + Y + Z 
CHOPPED					(Y = $fraStatus.TOP & Z = $fraStatus.HEIGHT)
 
$cmdExit	 		= $fraDetails.CommandButton("Exit")
$cmdExit.FONTNAME		= "Arial"
$cmdExit.FONTSIZE		= 10
$cmdExit.FONTBOLD		= 1
$cmdExit.TOP			= 267
$cmdExit.WIDTH			= 129
$cmdExit.HEIGHT			= 19
$cmdExit.LEFT			= 445
$cmdExit.OnClick		= "quit()"
 
$fraStatus			= $fraDetails.Frame
$fraStatus.BACKCOLOR		= $FORM.BACKCOLOR
$fraStatus.CAPTION		= "Account Status"
$fraStatus.HEIGHT		= 105
$fraStatus.LEFT			= 420 ; 416
$fraStatus.TOP			= 20 ; 224
$fraStatus.WIDTH		= 155
 
$chkAccountDisabled		= $fraStatus.CheckBox("Account Disabled")
$chkAccountDisabled.LEFT	= 10
$chkAccountDisabled.TabStop	= 0 ; False
$chkAccountDisabled.TOP		= 24
$chkAccountDisabled.OnClick	= "chkAccountDisabled_Click()"
$chkAccountDisabled.Enabled	= 0
 
$chkAccountLocked		= $fraStatus.CheckBox("Account Locked")
$chkAccountLocked.CAPTION	= "Account Locked"
$chkAccountLocked.LEFT		= 10
$chkAccountLocked.TabStop	= 0 ; False
$chkAccountLocked.TOP		= 56
$chkAccountLocked.OnClick	= "chkAccountLocked_Click()"
$chkAccountLocked.Enabled	= 0
 
$lblUsername			= $fraDetails.Label
$lblUsername.CAPTION		= "Username:"
$lblUsername.HEIGHT		= $txtUsername.HEIGHT
$lblUsername.WIDTH		= 75
$lblUsername.LEFT		= $txtUsername.LEFT - $lblUsername.WIDTH
$lblUsername.TOP		= $txtUsername.TOP
  
; Draw on the banner
  
$fraBanner.FONTSIZE = 20
$fraBanner.FONTNAME = "verdana"
$fraBanner.ForeColor = 0
$fraBanner.PrintXY(20,0,"User Manager")
$fraBanner.FONTSIZE = 8
$fraBanner.ForeColor = $FORM.RGB(0,100,100)
$fraBanner.PrintXY(23,32,"Powered by KiX v@KIX and Kixforms Build 27")
$fraBanner.FONTBOLD = 1
$fraBanner.FONTSIZE = 11
$fraBanner.PrintXY(23,46,"Welcome @FULLNAME")
$fraBanner.FONTBOLD = 0
$fraBanner.FONTSIZE = 10

Dim $strUserName
Dim $strUserPath
Dim $strDomainPath
 
$txtUsername.SelLength = Len($txtUsername.Text)
 
$FORM.Show
$txtUsername.SetFocus

While $FORM.Visible
 $=Execute($FORM.DoEvents)
Loop
 
Exit 1
 
Function cmdFindUser_Click()
	Dim $Wait
	$Wait = CREATEOBJECT("Kixtart.FORM")
	$Wait.CAPTION = "One moment please..."
	$Wait.SCALEWIDTH = 500
	$Wait.SCALEHEIGHT = 100
	$Wait.FONTSIZE = 14
	$Wait.FONTNAME = "Arial"
	$Wait.PrintXY(30,30,"Searching Active Directory, one moment please...")
	$Wait.CENTER
	
	Dim $adsUser,$adsGroup

	If $txtUsername.Text = ""
		$= $FORM.MsgBox("You must specify a username before 
CHOPPED			clicking Find.", "Username invalid")
		$txtUsername.Text = $strUserName
		Exit Sub
	Else
		$strUserName = $txtUsername.Text
	Endif

	$Wait.Show
	$strUserPath = "WinNT://@LDOMAIN/$strUserName,User"
	$adsUser = GetObject($strUserPath)
	If Not $adsUser
		; User does not exist
		$= $FORM.MsgBox("A user called (" + $txtUsername.Text + ") 
CHOPPED			does not exist.", "Username invalid")
		; Disable the controls
		$chkAccountDisabled.Enabled = 0
		$cmdSetPassword.Enabled = 0
		$cmdChangeExpiryDate.Enabled = 0
		$txtPassword.Enabled = 0
		$cmdChangeExpiryDate.Enabled = 0
		$txtPassword.Text = ""
		$txtDisplayName.Text = ""
		$txtExpiryDate.Text = ""
		$txtBadLoginCount.Text = ""
		$lstGroups.Clear
	Else
		$txtPassword.Text = ""
		$txtDisplayName.Text = ""
		$txtExpiryDate.Text = ""
		$txtBadLoginCount.Text = ""  
		$lstGroups.Clear
		$lstGroups.

		; User exists so bind to it
		$adsUser.GetInfo
		$txtDisplayName.Text = $adsUser.FullName
		$txtExpiryDate.Text = $adsUser.AccountExpirationDate

		If $adsUser.AccountDisabled
			; Check the disabled box
			$chkAccountDisabled.Value = 1
		Else

			; Uncheck the disabled box
			$chkAccountDisabled.Value = 0
		EndIf

		If $adsUser.IsAccountLocked
			; Check the locked box
			$chkAccountLocked.Value = 1
			; Enable the checkbox so that the account can be unlocked
			$chkAccountLocked.Enabled = 1
		Else
			; Uncheck the locked box
			$chkAccountLocked.Value = 0
 		EndIf

		For Each $adsGroup In $adsUser.Groups
			$lstGroups.AddItem ($adsGroup.Name)
		Next

		$strBLC = $adsUser.BadLoginCount
		If @ERROR
			$txtBadLoginCount.Text = 0
		Else
			$txtBadLoginCount.Text = $strBLC
		EndIf
         
		;Enable the controls
		$chkAccountDisabled.Enabled = $ADMINUSER
		$cmdSetPassword.Enabled = 1
		$cmdChangeExpiryDate.Enabled = $ADMINUSER
		$txtPassword.Enabled = 1
		$txtExpiryDate.Enabled = $ADMINUSER
		$lstGroups.Enabled = 1        
		$adsUser = 0
		$adsGroup = 0
		$txtUsername.SetFocus  
	Endif
	$FORM.Refresh
	$txtUsername.SetFocus
EndFunction
 
Function chkAccountDisabled_Click()
	Dim $adsUser
	$adsUser = GetObject($strUserPath)
	If $chkAccountDisabled.Value = 0
		; Enable account
		$adsUser.AccountDisabled = 0
		$adsUser.SetInfo
		IF @ERROR=0
			$=$FORM.MsgBox("The user (" + $strUserName + ") has 
CHOPPED				been enabled.", "User enabled")
		ELSE
			$=$FORM.MsgBox("The user (" + $strUserName + ") could 
CHOPPED				not be enabled.","Not Authorized")
		ENDIF
	Else
		; Disable Account
		$adsUser.AccountDisabled = 1
		$adsUser.SetInfo
		IF @ERROR=0
			$= $FORM.MsgBox("The user (" + $strUserName + ") has 
CHOPPED				been disabled.", "User disabled")
		ELSE
			$=$FORM.MsgBox("The user (" + $strUserName + ") could 
CHOPPED				not be disabled.","Not Authorized")
		ENDIF
	EndIf
	$adsUser = 0
EndFunction
 
Function chkAccountLocked_Click()
	Dim $adsUser
	If $chkAccountLocked.Value = 0
		; Unlock the account
		$adsUser = GetObject($strUserPath)
		$adsUser.IsAccountLocked = 0
		$adsUser.SetInfo
		IF @ERROR=0
			$=$FORM.MsgBox("The user (" + $strUserName + ") has 
CHOPPED				been unlocked.", "User enabled")
		ELSE
			$=$FORM.MsgBox("The user (" + $strUserName + ") could 
CHOPPED				not be unlocked.","Not Authorized")
			$chkAccountLocked.Value = 1
		ENDIF
	EndIf
	; Disable the checkbox
	$chkAccountLocked.Enabled = 0
	$adsUser = Nothing
EndFunction
 
Function cmdSetPassword_Click()
	; Get Minimum Password Length Allowed from Domain Policy
	$strDomainPath="WinNT://@LDOMAIN,Domain"
	$adsDomain = GetObject($strDomainPath)
	$intMinPasswordLength=$adsDomain.MinPasswordLength
	$adsDomain = Nothing

	$adsUser = GetObject($strUserPath)
	If $txtPassword.Text = ""
		$= $FORM.MsgBox("The password cannot be empty.", "User 
CHOPPED			password change")
	Else
		If Len($txtPassword.Text) < $intMinPasswordLength
			$= $FORM.MsgBox("The password cannot be less than " + 
CHOPPED				$intMinPasswordLength + " characters long.", 
CHOPPED				"User password change")
		Else
			$adsUser.SetPassword($txtPassword.Text)
			IF @ERROR=0
	  			$=$FORM.MsgBox("The password has been changed 
CHOPPED			to (" + $txtPassword.Text + ").", "User Password Change")
			ELSE
				$=$FORM.MsgBox("The password could not be 
CHOPPED					changed.","Not Authorized")
			ENDIF
		EndIf
	EndIf
	$txtPassword.Text = ""
	$adsUser = Nothing
EndFunction
 
Function cmdChangeExpiryDate_Click()
	Dim $adsUser
	$adsUser = GetObject($strUserPath)
	If $txtExpiryDate.Text = ""
		$= $FORM.MsgBox("The expiration date cannot be empty.", 
CHOPPED			"User expire date change")
		$txtExpiryDate.Text = $adsUser.AccountExpirationDate
	Else
		$adsUser.AccountExpirationDate = $txtExpiryDate.Text
		$adsUser.SetInfo
		If @ERROR
			$= $FORM.MsgBox("Expiration date has not been changed 
CHOPPED				due to an error.", "User expire date change")
		Else
			$= $FORM.MsgBox("Expiration date is changed to (" + 
CHOPPED				$txtExpiryDate.Text + ").", "User expire date change")
		EndIf
	EndIf
	$adsUser = Nothing
EndFunction

---

code:

---

  

; Used to hide the command window when complied into an .exe using kixcrypt.exe and kixforms
; Set at the top so that is it the first command used
SETCONSOLE("hide") 

; Created by Peter Fry
; Created on "8 August 2002"
;
; REQUIRES:
; KIXTART 4.10 - Kix32.exe in %windir%\system32
; KIXFORMS BUILD 21 - kixforms.dll in %windir%\system32 and registered with "regsvr32 kixforms.dll"
; An active directory enabled machine

; Version
$VERSION = "V2 Beta"

; Version History
;
; V1 beta = Text based only - small progress bar - Filename: key_beta_1.kix
; V2 beta = GUI Interface added - Filename: key_beta_2.kix

; Enable Logging (1 = enabled and 0 = disabled)
$LOGGING = 1

; Name of Program : Key User Scripts
; 
; Use of the Program
; 
; This program is intened to allow key users (apart of the account operator group)
; It will allow them to do the following
; 
; 1) Reset a given users password to the string set in the variable $PASSWORD
;
; 2) Unlock a locked account

BREAK ON ; enables canceling of the script without auto rebooting.
; DEBUG ON ; uncomment this to enable debuging

; SET Variables
$FILE_SERVER = "SH1391"
$PASSWORD = "123456"
$NOTAUTHORISED ="\\$FILE_SERVER\keyuser$\notauthorised.csv" ;file 1
$RUNLOG = "\\$FILE_SERVER\keyuser$\runlog.csv" ;file 2
$UNLOCKLOG = "\\$FILE_SERVER\keyuser$\unlocklog.csv" ;file 3
$PASSWORDLOG = "\\$FILE_SERVER\keyuser$\passwordlog.csv" ;file 4

; Authorise the user
$AUTH = CreateObject("Kixtart.Form") ; Create a form called $AUTH
$AUTH.Caption = "Authorising @USERID, Please Wait"
$AUTH.ScaleWidth = 500
$AUTH.ScaleHeight = 100
$AUTH.FontSize = 14
$AUTH.FontName = "Arial"
$AUTH.PrintXY(30,30,"Please Wait......")
$AUTH.Center
$AUTH.show

IF ingroup("Account Operators") = 1
	$= $AUTH.MsgBox("You are Authorised to run this program", "Authorised")
	$AUTHORISED = "YES"
ELSE
	$= $AUTH.MsgBox("You are NOT Authorised to run this program", "NOT Authorised")
	$AUTHORISED = "NO"
	IF $LOGGING = 1
		$NUL=Open(1,$NOTAUTHORISED,5)
		$NUL=writeline (1,"@USERID,@DATE,@TIME,$AUTHORISED" + Chr(13) + Chr(10))
		$NUL=CLOSE(1)
	ENDIF
	quit()
ENDIF

$AUTH = 0 ;Close the form called $AUTH

; Runlog
IF $LOGGING = 1
	$NUL=Open(2,$RUNLOG,5)
	$NUL=writeline (2,"@USERID,@DATE,@TIME,$AUTHORISED" + Chr(13) + Chr(10))
	$NUL=CLOSE(2)
ENDIF

; Form Vars
$FORM = CreateObject("Kixtart.Form") ; Create form called $FORM
$FORM.Caption			= "Key User Commands $VERSION"
$FORM.ScaleHeight		= 300
$FORM.ScaleWidth		= 425
$FORM.FontName			= "Arial"
$FORM.FontSize			= 9
$FORM.Center
 
$FRABANNER 			= $FORM.PictureBox
$FRABANNER.BackColor		= $FORM.RGB(255,255,255)
$FRABANNER.Height 		= 137
$FRABANNER.Left			= 8
$FRABANNER.Top			= 10
$FRABANNER.Width		= 410
 
$FRADETAILS			= $FORM.Frame("Details")
$FRADETAILS.Height 		= 140
$FRADETAILS.Left 		= 8
$FRADETAILS.Top 		= 152
$FRADETAILS.Width 		= 410

$CMDEXIT	 		= $FRADETAILS.CommandButton("Exit!")
$CMDEXIT.FontName		= "Comic Sans MS"
$CMDEXIT.FontSize		= 12
$CMDEXIT.FontBold		= 1
$CMDEXIT.Top			= 114
$CMDEXIT.Width			= 129
$CMDEXIT.Left			= 272
$CMDEXIT.HEIGHT			= 22
$CMDEXIT.OnClick		= "quit()"

$TXTUSERNAME			= $FRADETAILS.TextBox
$TXTUSERNAME.Height		= 25
$TXTUSERNAME.Left		= 104
$TXTUSERNAME.Top		= 24
$TXTUSERNAME.Text		= ""
$TXTUSERNAME.Width		= 161

$CMDFINDUSER			= $FRADETAILS.CommandButton("Find User!")
$CMDFINDUSER.Default		= 1 ; True
$CMDFINDUSER.FontName		= "Comic Sans MS"
$CMDFINDUSER.FontSize		= 12
$CMDFINDUSER.FontBold		= 1
$CMDFINDUSER.Left		= 272
$CMDFINDUSER.Top		= 24
$CMDFINDUSER.Width		= 129
$CMDFINDUSER.HEIGHT		= 22
$CMDFINDUSER.OnClick		= "cmdFindUser_Click()"

$LABEL_USERNAME			= $FRADETAILS.Label
$LABEL_USERNAME.Caption		= "Username:"
$LABEL_USERNAME.Height		= $TXTUSERNAME.Height
$LABEL_USERNAME.Width		= 75
$LABEL_USERNAME.Left		= $TXTUSERNAME.Left - $LABEL_USERNAME.Width
$LABEL_USERNAME.Top		= $TXTUSERNAME.Top

$CMDRESET_PASSWORD		= $FRADETAILS.CommandButton("Reset Password")
$CMDRESET_PASSWORD.Default	= 0 ; True
$CMDRESET_PASSWORD.FontName	= "Comic Sans MS"
$CMDRESET_PASSWORD.FontSize	= 12
$CMDRESET_PASSWORD.FontBold	= 1
$CMDRESET_PASSWORD.Left		= 104
$CMDRESET_PASSWORD.Top		= 90
$CMDRESET_PASSWORD.Width	= 129
$CMDRESET_PASSWORD.HEIGHT	= 22
$CMDRESET_PASSWORD.Enabled	= 0 ; Disabled / False
$CMDRESET_PASSWORD.OnClick	= "Reset_Password()"

$CMDUNLOCK			= $FRADETAILS.CommandButton("Unlock Account")
$CMDUNLOCK.Default		= 0 ; True
$CMDUNLOCK.FontName		= "Comic Sans MS"
$CMDUNLOCK.FontSize		= 12
$CMDUNLOCK.FontBold		= 1
$CMDUNLOCK.Left			= 272
$CMDUNLOCK.Top			= 90
$CMDUNLOCK.Width		= 129
$CMDUNLOCK.HEIGHT		= 22
$CMDUNLOCK.Enabled		= 0 ; Disabled / False
$CMDUNLOCK.OnClick		= "Unlock_Account()"


$TXTDISPLAYNAME			= $FRADETAILS.TextBox
$TXTDISPLAYNAME.Height		= 25
$TXTDISPLAYNAME.Left		= 104
$TXTDISPLAYNAME.TabStop		= 0 ; False
$TXTDISPLAYNAME.Top		= 56
$TXTDISPLAYNAME.Width		= 297
$TXTDISPLAYNAME.Enabled		= 1
$TXTDISPLAYNAME.BackColor	= $FORM.BackColor
 
$LABEL_DISPLAYNAME		= $FRADETAILS.Label("Full Name:")
$LABEL_DISPLAYNAME.Width	= 75
$LABEL_DISPLAYNAME.Left		= $TXTDISPLAYNAME.Left - $LABEL_DISPLAYNAME.Width
$LABEL_DISPLAYNAME.Top		= $TXTDISPLAYNAME.Top

; Draw on the banner
$FRABANNER.FontSize 		= 16
$FRABANNER.FontName 		= "verdana"
$FRABANNER.FontSize 		= 28
$FRABANNER.ForeColor 		= $FORM.RGB(100,200,200)
$FRABANNER.PrintXY(13,10,"Key User Commands")
$FRABANNER.ForeColor 		= 0
$FRABANNER.PrintXY(10,7,"Key User Commands")
$FRABANNER.FontSize 		= 12
$FRABANNER.ForeColor 		= $FORM.RGB(0,100,100)
$FRABANNER.PrintXY(13,58,"Created By Peter Fry")
$FRABANNER.FontBold 		= 1
$FRABANNER.PrintXY(13,80,"Welcome @USERID")
$FRABANNER.FontBold 		= 0
$FRABANNER.FontSize 		= 10
$FRABANNER.ForeColor 		= $FORM.RGB(0,100,100)

DIM $STRUSERNAME
DIM $STRUSERPATH
 
$FORM.Show
$TXTUSERNAME.SetFocus

WHILE $FORM.Visible
      $=Execute($FORM.DoEvents)
LOOP

$FORM = 0 ;Close the form called $FORM 

EXIT 1

FUNCTION cmdFindUser_Click()

	DIM $WAIT
	$WAIT = CreateObject("Kixtart.Form") ; Create form called $WAIT
	$WAIT.Caption = "One moment please..."
	$WAIT.ScaleWidth = 425
	$WAIT.ScaleHeight = 100
	$WAIT.FontSize = 14
	$WAIT.FontName = "Arial"
	$WAIT.PrintXY(30,30,"Searching for User, one moment please...")
	$WAIT.Center
	DIM $USERACCOUNT,$adsGroup
	IF $TXTUSERNAME.Text = ""
		$= $FORM.MsgBox("You must specIFy a username before clicking Find.", "Username invalid")
		$TXTUSERNAME.Text = $STRUSERNAME
		EXIT Sub
	ELSE
		$STRUSERNAME = $TXTUSERNAME.Text
	ENDIF
	$WAIT.Show
	$STRUSERPATH = "WinNT://@LDOMAIN/$STRUSERNAME,User"
	$USERACCOUNT = GetObject($STRUSERPATH)
	IF Not $USERACCOUNT
		; User does not exist
		$= $FORM.MsgBox("A user called (" + $TXTUSERNAME.Text + ") does not exist.", "Username invalid")
	ELSE
		; User exists so bind to it
		$USERACCOUNT.GetInfo
		$TXTDISPLAYNAME.Text = $USERACCOUNT.FullName
		$CMDRESET_PASSWORD.Enabled = 1 ; Enable the reset password button
		$CMDFINDUSER.Enabled = 0 ; Disable the finduser button
		IF $USERACCOUNT.IsAccountLocked
			
			$CMDUNLOCK.Enabled = 1 ; Enable the unlock button
			$CMDRESET_PASSWORD.Enabled = 0 ; disable the reset password button
		ENDIF
	ENDIF
	$FORM.Refresh
	$TXTUSERNAME.SetFocus

ENDFUNCTION

FUNCTION Unlock_Account()

	$WAIT = CreateObject("Kixtart.Form") ; Create form called $WAIT
	$WAIT.Caption = "One moment please..."
	$WAIT.ScaleWidth = 425
	$WAIT.ScaleHeight = 100
	$WAIT.FontSize = 14
	$WAIT.FontName = "Arial"
	$WAIT.PrintXY(30,30,"Unlocking Account, one moment please...")
	$WAIT.Center
	$WAIT.Show
	DIM $USERACCOUNT
	; APPEND to $UNLOCKLOG
	IF $LOGGING = 1
		$USERNAME = $TXTUSERNAME.Text
		$NUL=Open(3,$UNLOCKLOG,5)
		$NUL=writeline (3,"@USERID,$USERNAME,@DATE,@TIME" + Chr(13) + Chr(10))
		$NUL=CLOSE(3)
	ENDIF
	; Unlock the account
	$USERACCOUNT = GetObject($STRUSERPATH)
	$USERACCOUNT.GetInfo
	$USERACCOUNT.IsAccountLocked = 0
	$USERACCOUNT.SetInfo
	$= $FORM.MsgBox("The user (" + $STRUSERNAME + ") has been unlocked.", "User enabled")
	$WAIT = 0 ; close the form called $WAIT
	$USERACCOUNT = 0
	$FORM.Refresh
	$CMDEXIT.SetFocus
	$CMDUNLOCK.Enabled = 0 ; Disable the unlock button
	reset_password()

ENDFUNCTION

FUNCTION Reset_Password()

	$WAIT = CreateObject("Kixtart.Form") ; Create form called $WAIT
	$WAIT.Caption = "One moment please..."
	$WAIT.ScaleWidth = 425
	$WAIT.ScaleHeight = 100
	$WAIT.FontSize = 14
	$WAIT.FontName = "Arial"
	$WAIT.PrintXY(30,30,"Resetting Password, one moment please...")
	$WAIT.Center
	$WAIT.Show
	DIM $USERACCOUNT
	; APPEND to $PASSWORDLOG
	IF $LOGGING = 1
		$USERNAME = $TXTUSERNAME.Text
		$NUL=Open(4,$PASSWORDLOG,5)
		$NUL=writeline (4,"@USERID,$USERNAME,@DATE,@TIME" + Chr(13) + Chr(10))
		$NUL=CLOSE(4)
	ENDIF
	; Reset the pasword on the account
	$USERACCOUNT = GetObject($STRUSERPATH)
	$USERACCOUNT.GetInfo
	$USERACCOUNT.setpassword("$PASSWORD")
	$USERACCOUNT.put("PasswordExpired", 1)
	$USERACCOUNT.setinfo
	$= $FORM.MsgBox("The password for user (" + $STRUSERNAME + ") has been Reset.", "Password Reset")
	$WAIT = 0 ; close the form called $WAIT
	$USERACCOUNT = 0
	$FORM.Refresh
	$CMDEXIT.SetFocus
	$CMDRESET_PASSWORD.Enabled = 0 ; Disable the reset password button

ENDFUNCTION

---

this does lots of logging and checks if the person running the file (i'm using kixcrypt to make it an exe) is in the account operators group

check it out and comments would be great

this is a very much scaled down version of shawns MUD because i didn't need and i didn't want to show the users all the power they had

hope this helps

btw i found the expiredpassword somewhere on this board (sorry) i also use adsi25.chm which i downloaded from microsofts website

Pete

p.s. hope you don't mind me using your code shawn

code:

---

 
; Used to hide the command window when complied into an .exe using kixcrypt.exe and kixforms
; Set at the top so that is it the first command used
SETCONSOLE("hide") 

; Created by Richard Farthing
; Created on "15th August 2002"
;
; REQUIRES:
; KIXTART 4.10 - Kix32.exe in %windir%\system32
; KIXFORMS BUILD 21 - kixforms.dll in %windir%\system32 and registered with "regsvr32 kixforms.dll"
; An active directory enabled machine

; Version
$VERSION = "V1.1"


; Enable Logging (1 = enabled and 0 = disabled)
$LOGGING = 1

; Name of Program : Key User Scripts
; 
; Use of the Program
; 
; This program is intened to allow key users (apart of the account operator group)
; It will allow them to do the following
; 
; 1) Reset a given users password to the string set in the variable $PASSWORD
;
; 2) Unlock a locked account

BREAK ON ; enables canceling of the script without auto rebooting.
; DEBUG ON ; uncomment this to enable debuging

; SET Variables
$FILE_SERVER = "fileprint"
$PASSWORD = "aa123456"
$NOTAUTHORISED ="\\$FILE_SERVER\keyuser$\notauthorised.csv" ;file 1
$RUNLOG = "\\$FILE_SERVER\keyuser$\runlog.csv" ;file 2
$UNLOCKLOG = "\\$FILE_SERVER\keyuser$\unlocklog.csv" ;file 3
$PASSWORDLOG = "\\$FILE_SERVER\keyuser$\passwordlog.csv" ;file 4

; Authorise the user
$AUTH = CreateObject("Kixtart.Form") ; Create a form called $AUTH
$AUTH.Caption = "Authorising @USERID, Please Wait"
$AUTH.ScaleWidth = 475
$AUTH.ScaleHeight = 75
$AUTH.FontSize = 12
$AUTH.FontName = "Arial"
$AUTH.PrintXY(30,30,"Please Wait......")
$AUTH.Center
$AUTH.show

IF ingroup("Account Operators") = 1 

$= $AUTH.MsgBox("You are Authorised to run this program", "Authorised")
$AUTHORISED = "YES"

ELSE
$= $AUTH.MsgBox("You are NOT Authorised to run this program", "NOT Authorised")
$AUTHORISED = "NO"


IF $LOGGING = 1
$NUL=Open(1,$NOTAUTHORISED,5)
$NUL=writeline (1,"@USERID,@DATE,@TIME,$AUTHORISED" + Chr(13) + Chr(10))
$NUL=CLOSE(1)
ENDIF
quit()
endif
$AUTH = 0 ;Close the form called $AUTH

; Runlog
IF $LOGGING = 1
$NUL=Open(2,$RUNLOG,5)
$NUL=writeline (2,"@USERID,@DATE,@TIME,$AUTHORISED" + Chr(13) + Chr(10))
$NUL=CLOSE(2)
ENDIF

; Form Vars
$FORM = CreateObject("Kixtart.Form") ; Create form called $FORM
$FORM.Caption = "Password Reset $VERSION - Written by Richard Farthing"
$FORM.ScaleHeight = 215
$FORM.ScaleWidth = 425
$FORM.FontName = "Arial"
$FORM.FontSize = 9
$FORM.Center

$FRABANNER = $FORM.PictureBox
$FRABANNER.BackColor = $FORM.RGB(255,255,255)
$FRABANNER.Height = 75
$FRABANNER.Left = 8
$FRABANNER.Top = 10
$FRABANNER.Width = 410

$FRADETAILS = $FORM.Frame("Details")
$FRADETAILS.Height = 120
$FRADETAILS.Left = 8
$FRADETAILS.Top = 85
$FRADETAILS.Width = 410

$CMDEXIT = $FRADETAILS.CommandButton("Exit!")
$CMDEXIT.FontSize = 12
$CMDEXIT.Top = 85
$CMDEXIT.Width = 129
$CMDEXIT.Left = 272
$CMDEXIT.HEIGHT = 22
$CMDEXIT.OnClick = "quit()"

$TXTUSERNAME = $FRADETAILS.TextBox
$TXTUSERNAME.Height = 25
$TXTUSERNAME.Left = 104
$TXTUSERNAME.Top = 24
$TXTUSERNAME.Text = ""
$TXTUSERNAME.Width = 161

$CMDFINDUSER = $FRADETAILS.CommandButton("Find User!")
$CMDFINDUSER.Default = 1 ; True
$CMDFINDUSER.FontSize = 12
$CMDFINDUSER.Left = 272
$CMDFINDUSER.Top = 24
$CMDFINDUSER.Width = 129
$CMDFINDUSER.HEIGHT = 22
$CMDFINDUSER.OnClick = "cmdFindUser_Click()"

$LABEL_USERNAME = $FRADETAILS.Label
$LABEL_USERNAME.Caption = "Username:"
$LABEL_USERNAME.Height = $TXTUSERNAME.Height
$LABEL_USERNAME.Width = 75
$LABEL_USERNAME.Left = $TXTUSERNAME.Left - $LABEL_USERNAME.Width
$LABEL_USERNAME.Top = $TXTUSERNAME.Top

$CMDRESET_PASSWORD = $FRADETAILS.CommandButton("Reset Password")
$CMDRESET_PASSWORD.Default = 0 ; True
$CMDRESET_PASSWORD.FontSize = 12
$CMDRESET_PASSWORD.Left = 104
$CMDRESET_PASSWORD.Top = 85
$CMDRESET_PASSWORD.Width = 129
$CMDRESET_PASSWORD.HEIGHT = 22
$CMDRESET_PASSWORD.Enabled = 0 ; Disabled / False
$CMDRESET_PASSWORD.OnClick = "Reset_Password()"

$CMDUNLOCK = $FRADETAILS.CommandButton("Unlock Account")
$CMDUNLOCK.Default = 0 ; True
$CMDUNLOCK.FontSize = 12
$CMDUNLOCK.Left = 104
$CMDUNLOCK.Top = 58
$CMDUNLOCK.Width = 129
$CMDUNLOCK.HEIGHT = 22
$CMDUNLOCK.Enabled = 0 ; Disabled / False
$CMDUNLOCK.OnClick = "Unlock_Account()"


; Draw on the banner
$FRABANNER.FontSize = 16
$FRABANNER.FontSize = 16
$FRABANNER.ForeColor = 1
$FRABANNER.PrintXY(50,7,"Client Server - Password Reset")
$FRABANNER.FontSize = 12
$FRABANNER.FontBold = 1
$FRABANNER.PrintXY(110,35,"Welcome @USERID")
$FRABANNER.FontBold = 0
$FRABANNER.FontSize = 10
$FRABANNER.ForeColor = $FORM.RGB(0,100,100)

DIM $STRUSERNAME
DIM $STRUSERPATH

$FORM.Show
$TXTUSERNAME.SetFocus

WHILE $FORM.Visible
$=Execute($FORM.DoEvents)
LOOP

$FORM = 0 ;Close the form called $FORM 

EXIT 1

FUNCTION cmdFindUser_Click()

DIM $WAIT
$WAIT = CreateObject("Kixtart.Form") ; Create form called $WAIT
$WAIT.Caption = "One moment please..."
$WAIT.ScaleWidth = 400
$WAIT.ScaleHeight = 75
$WAIT.FontSize = 12
$WAIT.FontName = "Arial"
$WAIT.PrintXY(30,30,"Searching for User, one moment please...")
$WAIT.Center
DIM $USERACCOUNT,$adsGroup
IF $TXTUSERNAME.Text = ""
$= $FORM.MsgBox("You must specify a username before clicking Find.", "Username invalid")
else
IF $TXTUSERNAME.Text = "administrator"
$= $FORM.MsgBox("You are not allowed to reset this password.", "Username invalid")
else
IF $TXTUSERNAME.Text = "rf.admin"
$= $FORM.MsgBox("You are not allowed to reset this password.", "Username invalid")
else
IF $TXTUSERNAME.Text = "tr.admin"
$= $FORM.MsgBox("You are not allowed to reset this password.", "Username invalid")
$TXTUSERNAME.Text = $STRUSERNAME
EXIT Sub
ELSE
$STRUSERNAME = $TXTUSERNAME.Text
ENDIF
$WAIT.Show
$STRUSERPATH = "WinNT://dcserve1/$STRUSERNAME,User"
$STRUSERPATH2 = "WinNT://dcserve2/$STRUSERNAME,User"
$USERACCOUNT = GetObject($STRUSERPATH)
IF Not $USERACCOUNT
; User does not exist
$= $FORM.MsgBox("A user called (" + $TXTUSERNAME.Text + ") does not exist.", "Username invalid")
ELSE
; User exists so bind to it
$USERACCOUNT.GetInfo
$CMDRESET_PASSWORD.Enabled = 1 ; Enable the reset password button
$CMDFINDUSER.Enabled = 0 ; Disable the finduser button
IF $USERACCOUNT.IsAccountLocked

$CMDUNLOCK.Enabled = 1 ; Enable the unlock button
$CMDRESET_PASSWORD.Enabled = 0 ; disable the reset password button
ENDIF
ENDIF
       
$FORM.Refresh
$TXTUSERNAME.SetFocus

ENDFUNCTION

FUNCTION Unlock_Account()

$WAIT = CreateObject("Kixtart.Form") ; Create form called $WAIT
$WAIT.Caption = "One moment please..."
$WAIT.ScaleWidth = 400
$WAIT.ScaleHeight = 75
$WAIT.FontSize = 12
$WAIT.FontName = "Arial"
$WAIT.PrintXY(30,30,"Unlocking Account, one moment please...")
$WAIT.Center
$WAIT.Show
DIM $USERACCOUNT
; APPEND to $UNLOCKLOG
IF $LOGGING = 1
$USERNAME = $TXTUSERNAME.Text
$NUL=Open(3,$UNLOCKLOG,5)
$NUL=writeline (3,"@USERID,$USERNAME,@DATE,@TIME" + Chr(13) + Chr(10))
$NUL=CLOSE(3)
ENDIF
; Unlock the account
$USERACCOUNT = GetObject($STRUSERPATH)
$USERACCOUNT.GetInfo
$USERACCOUNT.IsAccountLocked = 0
$USERACCOUNT.SetInfo
$= $FORM.MsgBox("The user (" + $STRUSERNAME + ") has been unlocked.", "User enabled")
$WAIT = 0 ; close the form called $WAIT
$USERACCOUNT = 0
$FORM.Refresh
$CMDEXIT.SetFocus
$CMDUNLOCK.Enabled = 0 ; Disable the unlock button
reset_password()

ENDFUNCTION

FUNCTION Reset_Password()

$WAIT = CreateObject("Kixtart.Form") ; Create form called $WAIT
$WAIT.Caption = "One moment please..."
$WAIT.ScaleWidth = 400
$WAIT.ScaleHeight = 75
$WAIT.FontSize = 12
$WAIT.FontName = "Arial"
$WAIT.PrintXY(30,30,"Resetting Password, one moment please...")
$WAIT.Center
$WAIT.Show
DIM $USERACCOUNT
; APPEND to $PASSWORDLOG
IF $LOGGING = 1
$USERNAME = $TXTUSERNAME.Text
$NUL=Open(4,$PASSWORDLOG,5)
$NUL=writeline (4,"@USERID,$USERNAME,@DATE,@TIME" + Chr(13) + Chr(10))
$NUL=CLOSE(4)
ENDIF
; Reset the pasword on the account
$USERACCOUNT = GetObject($STRUSERPATH)
$USERACCOUNT.GetInfo
$USERACCOUNT.setpassword("$PASSWORD")
$USERACCOUNT.put("PasswordExpired", 1)
$USERACCOUNT.setinfo
$USERACCOUNT = GetObject($STRUSERPATH2)
$USERACCOUNT.GetInfo
$USERACCOUNT.setpassword("$PASSWORD")
$USERACCOUNT.put("PasswordExpired", 1)
$USERACCOUNT.setinfo
$= $FORM.MsgBox("The password for user (" + $STRUSERNAME + ") has been Reset to aa123456.", "Password Reset")
$WAIT = 0 ; close the form called $WAIT
$USERACCOUNT = 0
$FORM.Refresh
$CMDEXIT.SetFocus
$CMDRESET_PASSWORD.Enabled = 0 ; Disable the reset password button
$FORM.Refresh

ENDFUNCTION

 

---

quote:

---

Script error: array reference out of bounds!
$Group2Array[$Group2CNT]=$Group.Name

---

• The User info
• Checks for the profile and homedir
• If the homedir does not exist, add the appropriate security to it.
• The security perms for a folder is something that Shawn, Ceej, and I bounced around about year ago.

code:

---

'Use the wtsapi32.dll from VBS

' VB Constant declarations for WTS_CONFIG_CLASS
Const WTSUserConfigInitialProgram = &H0                ' string
Const WTSUserConfigWorkingDirectory = &H1              ' string
Const WTSUserConfigfInheritInitialProgram = &H2        ' DWORD
Const WTSUserConfigfAllowLogonTerminalServer = &H3     ' DWORD

' Timeout settings
Const WTSUserConfigTimeoutSettingsConnections = &H4    ' DWORD
Const WTSUserConfigTimeoutSettingsDisconnections = &H5 ' DWORD
Const WTSUserConfigTimeoutSettingsIdle = &H6           ' DWORD

' Client device settings
Const WTSUserConfigfDeviceClientDrives = &H7           ' DWORD
Const WTSUserConfigfDeviceClientPrinters = &H8         ' DWORD
Const WTSUserConfigfDeviceClientDefaultPrinter = &H9   ' DWORD

' Connection settings
Const WTSUserConfigBrokenTimeoutSettings = &HA         ' DWORD
Const WTSUserConfigReconnectSettings = &HB             ' DWORD

' Modem settings
Const WTSUserConfigModemCallbackSettings = &HC         ' DWORD
Const WTSUserConfigModemCallbackPhoneNumber = &HD      ' string

' Shadow settings
Const WTSUserConfigShadowingSettings = &HE             ' DWORD

' User Profile settings
Const WTSUserConfigTerminalServerProfilePath = &HF     ' string

' Terminal Server home directory
Const WTSUserConfigTerminalServerHomeDir = &H10        ' string
Const WTSUserConfigTerminalServerHomeDirDrive = &H11   ' string
Const WTSUserConfigfTerminalServerRemoteHomeDir = &H12 ' DWORD

'*************************************************************************
'*************************************************************************
Dim TSCFG

Set TSCFG= CreateObject("UserConfig.TSUserConfig")
Set oFs = CreateObject("Scripting.FileSystemObject")

' -- Grab the current domain you are running this script from
Set WshNetwork = WScript.CreateObject("WScript.Network")
TSCFG.Domain = WshNetwork.UserDomain
' -- If you want to manually set this, uncomment the next line and comment the previous two
'TSCFG.Domain = "MYDOMAIN"
'TSCFG.Domain = InputBox("Type The Domain name")

' -- Set the server where the shares reside
ShareServer = "SHARESERVER"

Debugger = "_No" 'If you want to see visual results, set this to be "_Yes"

TSCFG.UserName = InputBox("Type a User Name")

If TSCFG.UserName = "" Then
       WScript.Echo "No UserID input provided.  Stopping script now."
       WScript.Quit (1)
End If

'We need to check and if need be create some folders for this user..
' Capture the name of the server are you adding the share to
TextShare = "\\" & ShareServer & "\D" & Chr(36)

' Setting the user$ variable - jdoe$ - Hidden shares don't show when browsing to a server
TextUserN = TSCFG.UserName & Chr(36)

' Setting the user1$ variable - jdoe1$ - Hidden shares don't show when browsing to a server
' Why are we using a jdoe1$ ??  This server has other shared drives for local Corporate User too.
TextUserNM = TSCFG.UserName & "1" & Chr(36) ' Created for home_dir

' Path for user folders
Homedir = TextShare & "\Citrix_Homedir"
Profiles = TextShare & "\Citrix_Profiles"

' Now let's create a variable to work with - \\SERVER\users\jdoe
' Directory to save
UserProfileDir = Profiles & "\" & TSCFG.UserName

' Check existence for folder
If Debugger = "_Yes" Then
If oFs.FolderExists(UserProfileDir) Then
 WScript.Echo "The citrix profiles folder " & UserProfileDir & " already exists."
end if
end if

UserHomeDir = Homedir & "\" & TSCFG.UserName

' Check existence for folder
If Debugger = "_Yes" Then
If oFs.FolderExists(UserHomeDir) Then
 WScript.Echo "The citrix Home_dir folder " & UserHomeDir & vbcrlf & " already exists and we are continuing."
end if
end if

' Create folder Profiles
If Not oFs.FolderExists(UserHomeDir) Then oFs.CreateFolder UserHomeDir

If Not oFs.FolderExists(UserProfileDir) Then oFs.CreateFolder UserProfileDir

' Create share
Set FservObj = GetObject("WinNT://" & ShareServer & "/lanmanserver")

If oFs.FolderExists("\\" & ShareServer & "\" & TextUserNM) Then
If Debugger = "_Yes" Then
 WScript.Echo "The share \\" & ShareServer & "\" & TextUserNM & " already exists." & vbcrlf & " Continuing..."
end if
else
' Create the share for the server jdoe1$
set newshare = FservObj.create("fileshare",TextUserNM)
' Set the path for the share on the server - D:\Users
newshare.path = "D:\Citrix_Homedir\" & TSCFG.UserName
newshare.setinfo
WScript.Echo "The folders for " & TSCFG.UserName & " and share have been created."
end if


'-- Query the information for debugging - uncomment the next three lines to see this
'MsgBox TSCFG.QueryUserConfig(WTSUserConfigTerminalServerProfilePath)
'MsgBox TSCFG.QueryUserConfig(WTSUserConfigTerminalServerHomeDir)
'MsgBox TSCFG.QueryUserConfig(WTSUserConfigTerminalServerHomeDirDrive)

'-- Set some information
TSCFG.SetUserConfig WTSUserConfigfAllowLogonTerminalServer, 1
TSCFG.SetUserConfig WTSUserConfigTerminalServerProfilePath , "\\" & ShareServer & "\CITRIX_PROFILES\" & TSCFG.UserName
TSCFG.SetUserConfig WTSUserConfigTerminalServerHomeDirDrive , "H:"
TSCFG.SetUserConfig WTSUserConfigTerminalServerHomeDir , "\\" & ShareServer & "\" & TSCFG.UserName & "1" & chr(36)

WScript.Echo "The User Profile and Home Drive Server have been set for " & vbcrlf & TSCFG.UserName & vbcrlf & " and may take up to an hour to show up."

l = 0
'***  show all settings - documentation; see below!
'For x = 0 To 18
'  MsgBox "setting " & x & " = " & TSCFG.QueryUserConfig(x)
'Next

''' --- Example Code and settings you can use..

'***  change a few settings:
'TSCFG.SetUserConfig WTSUserConfigWorkingDirectory , "c:\workdir"
'TSCFG.SetUserConfig WTSUserConfigInitialProgram , "startup.exe"

'*************************************************************************
'*************************************************************************


'***  http://msdn.microsoft.com/library/default.asp?url=/library/en-us/termserv/tsref_9z76.asp

'WTSUserConfigInitialProgram
  'A null-terminated string containing the path of the initial program that Terminal Services
  'runs when the user logs on.
  'If the WTSUserConfigfInheritInitialProgram value is 1, the initial program can be any
  'program specified by the client.
  
'WTSUserConfigfInheritInitialProgram
   'WTSUserConfigfInheritInitialProgram value is 1, the initial program can be any program
   'specified by the client.
   
'WTSUserConfigWorkingDirectory
  'A null-terminated string containing the path of the working directory for the initial
  'program.
  'WTSUserConfigfInheritInitialProgram
  'A value that indicates whether the client can specify the initial program. Value Meaning
  '0 The client cannot specify the initial program. The WTSUserConfigInitialProgram string
  'indicates the initial program. If you specify a user's initial program, that's the only
  'program they can run; terminal server logs off the user when the user exits that program.
  '1 The client can specify the initial program.
  
  
'WTSUserConfigfAllowLogonTerminalServer
  'A value that indicates whether the user account is permitted to log on to a terminal server.
  'Value Meaning
  '0 The user cannot logon.
  '1 The user can logon.
  
  
'WTSUserConfigTimeoutSettingsConnections
  'A DWORD value that specifies the maximum connection duration, in milliseconds. One minute
  'before the connection timeout interval expires, the user is notified of the pending
  'disconnection. The user's session is disconnected or terminated depending on the
  'WTSUserConfigBrokenTimeoutSettings value. Every time the user logs on, the timer is reset.
  'A value of zero indicates the connection timer is disabled.
  'WTSUserConfigTimeoutSettingsDisconnections
  'A DWORD value that specifies the maximum duration, in milliseconds, that a terminal
  'server retains a disconnected session before the logon is terminated. A value of zero
  'indicates the disconnection timer is disabled.
  'WTSUserConfigTimeoutSettingsIdle
  'A DWORD value that specifies the maximum idle time, in milliseconds. If there is no
  'keyboard or mouse activity for the specified interval, the user's session is disconnected
  'or terminated depending on the WTSUserConfigBrokenTimeoutSettings value. A value of zero
  'indicates the idle timer is disabled.
  'WTSUserConfigfDeviceClientDrives
  'Citrix ICA clients: A value that indicates whether the terminal server automatically
  'reestablishes client drive mappings at logon. Value Meaning
  '0 The server does not automatically connect to previously mapped client drives.
  '1 The server automatically connects to previously mapped client drives at logon.
  
  
'WTSUserConfigfDeviceClientPrinters
  'RDP 5.0 clients and Citrix ICA clients: A value that indicates whether the terminal server
  'automatically reestablishes client printer mappings at logon. Value Meaning
  '0 The server does not automatically connect to previously mapped client printers.
  '1 The server automatically connects to previously mapped client printers at logon.
  
  
'WTSUserConfigfDeviceClientDefaultPrinter
  'RDP 5.0 clients and Citrix ICA clients: A value that indicates whether the client printer
  'is the default printer. Value Meaning
  '0 The client printer is not the default printer.
  '1 The client printer is the default printer.
  
  
'WTSUserConfigBrokenTimeoutSettings
  'A value that indicates what happens when the connection or idle timers expire or when a
  'connection is lost due to a connection error. Value Meaning
  '0 The session is disconnected.
  '1 The session is terminated.
  
  
'WTSUserConfigReconnectSettings
  'A value that indicates how a disconnected session for this user can be reconnected.
  'Value Meaning
  '0 The user can log on to any client computer to reconnect to a disconnected session.
  'Note that sessions started at clients other than the system console cannot be connected
  'to the system console, and sessions started at the system console cannot be disconnected.
  '1 The user can reconnect to a disconnected session by logging on to the client computer
  'used to establish the disconnected session. If the user logs on from a different client
  'computer, the user gets a new logon session.
  
  
'WTSUserConfigModemCallbackSettings
  'Citrix ICA clients: A value that indicates the configuration for dialup connections in which
  'the terminal server hangs up and then calls back the client to establish the connection.
  'Value Meaning
  '0 Callback connections are disabled.
  '1 The server prompts the user to enter a phone number and calls the user back at that phone
  'number. You can use the WTSUserConfigModemCallbackPhoneNumber value to specify a default
  'phone number.
  '2 The server automatically calls the user back at the phone number specified by the
  'WTSUserConfigModemCallbackPhoneNumber value.
  
  
'WTSUserConfigModemCallbackPhoneNumber
  'Citrix ICA clients: A null-terminated string containing the phone number to use for callback
  'connections.
  'WTSUserConfigShadowingSettings
  'RDP 5.0 clients and Citrix ICA clients: A value that indicates whether the user session can
  'be shadowed. Shadowing allows a user to remotely monitor the on-screen operations of another user.
  'Value Meaning
  '0 Disable
  '1 Enable input, notify
  '2 Enable input, no notify
  '3 Enable no input, notify
  '4 Enable no input, no notify
  
  
'WTSUserConfigTerminalServerProfilePath
  'A null-terminated string containing the path of the user's profile for terminal server logon.
  'The directory the path identifies must be created manually, and must exist prior to the logon.
  'WTSSetUserConfig will not create the directory if it does not already exist.
  'WTSUserConfigTerminalServerHomeDir
  'A null-terminated string containing the path of the user's home directory for terminal server
  'logon. This string can specify a local path or a UNC path (\\machine\share\path). See
  'WTSUserConfigfTerminalServerRemoteHomeDir.
  'WTSUserConfigTerminalServerHomeDirDrive
  'A null-terminated string containing a drive specification (a drive letter followed by a colon)
  'to which the UNC path specified in the WTSUserConfigTerminalServerHomeDir string is mapped.
  'See WTSUserConfigfTerminalServerRemoteHomeDir.
  'WTSUserConfigfTerminalServerRemoteHomeDir
  'A value that indicates whether the user's home directory for terminal server logon is a local
  'path or a mapped drive letter. Note that this value cannot be used with WTSSetUserConfig.
  'Value Meaning
  '0 The WTSUserConfigTerminalServerHomeDir string contains the local path of the user's terminal
  'server logon home directory.
  '1 The WTSUserConfigTerminalServerHomeDir string contains the UNC path of the user's terminal
  'server logon home directory, and the WTSUserConfigTerminalServerHomeDirDrive string contains
  'a drive letter to which the UNC path is mapped.

---

quote:

---

Script error: array reference out of bounds!
$Group2Array[$Group2CNT]=$Group.Name

---

code:

---

		IF $Group.Class = "Group"
			;$Group2Array[$Group2CNT]=$Group.Name
			$Group2CNT = $Group2CNT + 1
		ENDIF

---

	$QueryString = " 1
		$TstBit = $TstBit / 2
	LOOP