sync: auto-sync from HOWARD-HOME at 2026-07-17 14:14:41
Author: Howard Enos Machine: HOWARD-HOME Timestamp: 2026-07-17 14:14:41
This commit is contained in:
15
clients/cascades-tucson/scripts/check-avallejo.ps1
Normal file
15
clients/cascades-tucson/scripts/check-avallejo.ps1
Normal file
@@ -0,0 +1,15 @@
|
||||
Import-Module ActiveDirectory
|
||||
$u = Get-ADUser 'a.vallejo' -Properties MemberOf, Enabled, PasswordLastSet, LockedOut, PasswordExpired
|
||||
Write-Output "Enabled: $($u.Enabled) LockedOut: $($u.LockedOut) PwExpired: $($u.PasswordExpired)"
|
||||
Write-Output "PwLastSet: $($u.PasswordLastSet)"
|
||||
Write-Output "UPN: $($u.UserPrincipalName)"
|
||||
Write-Output "Groups:"
|
||||
$u.MemberOf | ForEach-Object { Write-Output " $_" }
|
||||
# Check if ChangePasswordAtLogon is set (would block login)
|
||||
$raw = Get-ADUser 'a.vallejo' -Properties pwdLastSet
|
||||
if ($raw.pwdLastSet -eq 0) { Write-Output "WARNING: ChangePasswordAtLogon=TRUE (pwdLastSet=0)" }
|
||||
# Validate credential against DC
|
||||
Add-Type -AssemblyName System.DirectoryServices.AccountManagement
|
||||
$ctx = New-Object System.DirectoryServices.AccountManagement.PrincipalContext([System.DirectoryServices.AccountManagement.ContextType]::Domain, "cascades.local")
|
||||
$valid = $ctx.ValidateCredentials("a.vallejo", "Sunrise4827")
|
||||
Write-Output "Password validates: $valid"
|
||||
Reference in New Issue
Block a user