user account expire

Posted on 2014-01-10
Medium Priority
Last Modified: 2014-02-24
We are using Server 2008 Standard R2 64 Bit. Specific OU all user account expire end . Due to that user unable to login. automatic how to find why and resolved this issue. Please find attachment.
Question by:rsbgroup
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
LVL 15

Accepted Solution

Jaroslav Mraz earned 1500 total points
ID: 39773032

you can filter that user by powershell comand


Account expiration can be set by powershell script or localy by admin

you can use this command


But change date to never
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39773307
Fastest way to do this would be to Edit Properties of multiple accounts which reside in the OU.
- Go to the OU where the disabled users are
- Hold ctrl (idividually select) or hold shift (select multiple) users
- Right click one of the users you select > click properties
- Click on the Account Tab
- From here you can set new expire date, unlock the account etc (see screenshot below)...
Edit Multiple PropertiesThere are additonal properties you can set that are not viewable in the screenshot above.

You can also do this via powershell as well. Use the below syntax for reference...
import-module activedirectory
Get-ADUser -Filter * -Searchbase "ou=testou,dc=domain,dc=com" -Properties * | Set-ADUser -Enabled $true -AccountExpirationDate "02/28/2014"

Open in new window

The script above will take all users in the "testou" and Enable their account and set the expire date to Feb 28 2014.

LVL 20

Expert Comment

ID: 39777642
I am a bit confused are you asking how all accounts in one OU are set to expire on a specific date or how to set all accounts to expire?
How Blockchain Is Impacting Every Industry

Blockchain expert Alex Tapscott talks to Acronis VP Frank Jablonski about this revolutionary technology and how it's making inroads into other industries and facets of everyday life.

LVL 53

Expert Comment

by:Will Szymkowski
ID: 39777671
I believe that the user is saying that he has an OU with disabled accounts and needs to have them all re-enabled, based on what i read.

LVL 20

Expert Comment

ID: 39777908
But this statement "automatic how to find why and resolved this issue" makes me think otherwise though.... ;-)
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39777920
Yeah I guess it could help if it was worded differently. I guess we just need to see what the asker says :-D

LVL 20

Expert Comment

ID: 39777921
If these accounts are getting disabled there are only three ways for it to happen..

his is not a default Microsoft Active Directory Domain Services behavior. Below are the only possibilities for the accounts being locked

a) Manual disabling of User account or User accounts

b) Schedule Task which triggers a Script to disable the User account / User accounts

b) Manual execution of WMI Script / Powershell Script to disable the User account or User accounts


Also any group policy changes lately

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Here's a look at newsworthy articles and community happenings during the last month.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses
Course of the Month10 days, 14 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question