Setting expired date on accounts

Question

Hi!

Is there support in the product, either through rules, or through Powershell script to set Account Expired date on all disabled accounts that lacks a defined Expiry date? And preferably that Account Expiry date is set to last login + 1 month for those accounts.

/Kaj

Answer 1

Hello Kaj,

This can be achieved using a Scheduled Task. It will check the expiration date for all disabled users and update it if necessary. To create the task:

1. Launch Adaxes Administration Console.

2. Right-click your Adaxes service node, navigate to New and click Scheduled Task.
   

3. On step 3 of Create Scheduled Task wizard select User Object type and click Next.
   

4. Click Add Action.

5. Select Update the User and click Add.
   

6. In the Property to modify drop-down list, select Account Expires.

7. Click Edit in the New value field.
   

8. In the Set the date to drop-down list, select Last Logon.

9. Select plus 1 month and click OK three times.
   

10. Double-click Always.

11. Select If PowerShell script returns true.

12. Paste the script below into the Script field.

     $accountExpires = $Context.TargetObject.Get("accountExpires")
     $Context.ConditionIsMet = ($accountExpires -eq 0) -or ($accountExpires -eq 9223372036854775807)

13. Enter a short description and click OK.
    

14. Right-click the condition you have created and click Add New Condition.
    

15. Select If account is enabled/disabled/locked.

16. Select If the User account is disabled and click OK.
    

17. Click Next and finish creating the Scheduled Task. You should have something like the following:
    

Comments

Thanks,

Not sure it works though - when creating the script and running it everything seems normal, but when I look in the logfile afterwards I see that

Modify xxxxxxx (yyyyyyy): clear Account Expires Set expiry date 2018-03-22 21:20:08

Checking the user the account expires field is still empty .... so from where does the clear account expires come?

But changing the modify user field to LastLogonTimestamp +1 month did the trick.