Vista - AD entry badPwdCount property

Hi there !

when i try to get the badPwdCount property value of an ADSI entry, i
get an empty string, even if i get all the other properties;

i've tried to cast the variable as an integer, but then i always get
0;

Could you help me please ?

bye
Nico

Could you provide us with a codepiece so that we can see how you do it?
What happens if you try to get other integer-type attributes (e.g.
"logonCount")?

"Nicopilami" wrote:

> Hi there !
>
> when i try to get the badPwdCount property value of an ADSI entry, i
> get an empty string, even if i get all the other properties;
>
> i've tried to cast the variable as an integer, but then i always get
> 0;
>
> Could you help me please ?
>
> bye
> Nico
>
>

Bad Password Count is only recorded on the DC where the login attempt was
made. It is not replicated. Are you sure the DC you are querying has
anything in that field?

"Nicopilami" wrote:

> Hi there !
>
> when i try to get the badPwdCount property value of an ADSI entry, i
> get an empty string, even if i get all the other properties;
>
> i've tried to cast the variable as an integer, but then i always get
> 0;
>
> Could you help me please ?
>
> bye
> Nico
>
>

On 18 juil, 09:48, Gerd Schneider
<GerdSchnei...@discussions.microsoft.com> wrote:
> Could you provide us with a codepiece so that we can see how you do it?
> What happens if you try to get other integer-type attributes (e.g.
> "logonCount")?
>
>
>
> "Nicopilami" wrote:
> > Hi there !
>
> > when i try to get the badPwdCount property value of an ADSI entry, i
> > get an empty string, even if i get all the other properties;
>
> > i've tried to cast the variable as an integer, but then i always get
> > 0;
>
> > Could you help me please ?
>
> > bye
> > Nico- Masquer le texte des messages précédents -
>
> - Afficher le texte des messages précédents -

> Could you provide us with a codepiece so that we can see how you do it?

sure :
$de = New-Object system.directoryservices.directoryentry
$ads = new-object system.directoryservices.directorysearcher -
argumentlist $de,$ldapQuery
$RecordList = $ads.findall()
....


Write-Host "displayname : " $Record.Properties["displayname"] " ("
$Record.Properties["cn"] ")" -foreground green
"OU : " + $Record.Properties["c"] + " (" + $Record.Properties["l"]
+")"
"profilePath : " + $Record.Properties["profilepath"]
"mail : " + $Record.Properties["mail"]
"expires : " + $Record.Properties["accountExpires"]
"badpwdcount : " + [int]$Record.Properties["badPwdCount"]
"service : " + $Record.Properties["description"]

expires ans badpwdcount are always equal to 0, and it is not nomal
because i work in a big corporation, so our users encount often
problems with locked account
In this case, the mmc console shows that the users account is locked
(gray checked field), but the badpwdcount property stays always at
zero.


> What happens if you try to get other integer-type attributes (e.g.
> "logonCount")?

logonCount seems to be ok )

bye
thx for your help
Nico

On 18 juil, 14:48, Rob Campbell
<RobCampb...@discussions.microsoft.com> wrote:
> Bad Password Count is only recorded on the DC where the login attempt was
> made. It is not replicated. Are you sure the DC you are querying has
> anything in that field?
>
>
>
> "Nicopilami" wrote:
> > Hi there !
>
> > when i try to get the badPwdCount property value of an ADSI entry, i
> > get an empty string, even if i get all the other properties;
>
> > i've tried to cast the variable as an integer, but then i always get
> > 0;
>
> > Could you help me please ?
>
> > bye
> > Nico- Masquer le texte des messages précédents -
>
> - Afficher le texte des messages précédents -

i don't understand what you mean, could you tell me a little bit
more ?
thx
bye
Nico

If you look at the same user account, on the same domain controller that
you're running the script against with ADSIEdit, is there anything in that
field?

Badpassword counts aren't replictated (at least not among all the DCs).

I believe they are replicted to the PDC emulator. Is that the DC you're
reading the field from?

"Nicopilami" wrote:

> On 18 juil, 14:48, Rob Campbell
> <RobCampb...@discussions.microsoft.com> wrote:
> > Bad Password Count is only recorded on the DC where the login attempt was
> > made. It is not replicated. Are you sure the DC you are querying has
> > anything in that field?
> >
> >
> >
> > "Nicopilami" wrote:
> > > Hi there !
> >
> > > when i try to get the badPwdCount property value of an ADSI entry, i
> > > get an empty string, even if i get all the other properties;
> >
> > > i've tried to cast the variable as an integer, but then i always get
> > > 0;
> >
> > > Could you help me please ?
> >
> > > bye
> > > Nico- Masquer le texte des messages pricidents -
> >
> > - Afficher le texte des messages pricidents -
>
> i don't understand what you mean, could you tell me a little bit
> more ?
> thx
> bye
> Nico
>
>