Currently, we are using AdsGetObject MSDN API to get the password expiry information of user using https://docs.microsoft.com/en-us/windows/win32/ad/example-code-for-searching-for-users example and it is working fine for Group Policy Object password expiry information.
But yesterday, we got the escalation, where this API is not honoring the password expiration enforced through password setting object policies.
Does anyone have idea is there any way where this API can honor PSO policies over Group Policies to get the password expiry data? Even net user <username> command also return the password expire date based on Group Policies not PSO policies.
Aucun commentaire:
Enregistrer un commentaire