user account expire

We are using Server 2008 Standard R2 64 Bit. Specific OU all user account expire end . Due to that user unable to login. automatic how to find why and resolved this issue. Please find attachment.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jaroslav MrazCTOCommented:

you can filter that user by powershell comand

Account expiration can be set by powershell script or localy by admin

you can use this command

But change date to never

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Will SzymkowskiSenior Solution ArchitectCommented:
Fastest way to do this would be to Edit Properties of multiple accounts which reside in the OU.
- Go to the OU where the disabled users are
- Hold ctrl (idividually select) or hold shift (select multiple) users
- Right click one of the users you select > click properties
- Click on the Account Tab
- From here you can set new expire date, unlock the account etc (see screenshot below)...
Edit Multiple PropertiesThere are additonal properties you can set that are not viewable in the screenshot above.

You can also do this via powershell as well. Use the below syntax for reference...
import-module activedirectory
Get-ADUser -Filter * -Searchbase "ou=testou,dc=domain,dc=com" -Properties * | Set-ADUser -Enabled $true -AccountExpirationDate "02/28/2014"

Open in new window

The script above will take all users in the "testou" and Enable their account and set the expire date to Feb 28 2014.

I am a bit confused are you asking how all accounts in one OU are set to expire on a specific date or how to set all accounts to expire?
Get Blueprints for Increased Customer Retention

The IT Service Excellence Tool Kit has best practices to keep your clients happy and business booming. Inside, you’ll find everything you need to increase client satisfaction and retention, become more competitive, and increase your overall success.

Will SzymkowskiSenior Solution ArchitectCommented:
I believe that the user is saying that he has an OU with disabled accounts and needs to have them all re-enabled, based on what i read.

But this statement "automatic how to find why and resolved this issue" makes me think otherwise though.... ;-)
Will SzymkowskiSenior Solution ArchitectCommented:
Yeah I guess it could help if it was worded differently. I guess we just need to see what the asker says :-D

If these accounts are getting disabled there are only three ways for it to happen..

his is not a default Microsoft Active Directory Domain Services behavior. Below are the only possibilities for the accounts being locked

a) Manual disabling of User account or User accounts

b) Schedule Task which triggers a Script to disable the User account / User accounts

b) Manual execution of WMI Script / Powershell Script to disable the User account or User accounts

Also any group policy changes lately
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.