UMRA – Bulk Reset Active Directory User Password Last Set at 8:23 PM

If you have questions email me @ jjmusicpro@hotmail.com

If you haven’t already, please read my first post on where and how to download a trial version of User Management Resource Administrator, developed by tools4ever. UMRA

Download Trial Version of UMRA > http://www.tools4ever.com/download/
Download Trial Version of SSRPM > http://www.tools4ever.com/download/

UMRA – Bulk Reset Active Directory User Password Last Set

Just recently I was tasked with resting eight thousand Active Directory Users Password Last Reset attribute. The issues came about after our client previously edited all these users, yes you heard right, manually edited these users for a 60 day password expiration. However, some of their project deadlines were pushed back, and if these users passwords expired, they would be locked out of multiple systems. So this is a perfect example of where to use UMRA bulk capabilities to manage all of this. The previous manual method took them over 3 days with 2 full time staff working on this, however, running this change with UMRA took me 20 minutes, and I even logged all my data to a text file for the client. So How did I change this Active Directory attribute, to set the Password Last Set to today’s date, so it would give them another 60 days of grace time? Easy, since UMRA has the ability to loop through a set of users, either from network data, a CSV, or a table of users in an OU, or multiple OU’s. I was able to quickly create a table of all users in a specific OU, then set the pwdlastSet value to 0, then after this was done, rerun the project and set the pwdlastSet attribute to 1, setting it to 1 will set it as the current date. Now, keep in mind, this was not a small company, and around 15 or so people were on the phone as I was doing this. I advised them, we will do 2 runs of this project, and also, I will log to a .CSV file all the users I edited, and what we set there pwdlastSet attribute to. After all was said and done, a 20 minute UMRA script did what took them over 300 man hours to do.

Now I hope this gives some of you out there an idea of just how fast UMRA can get or set attributes in Active Directory. But again, if you have any questions or comments, please feel free to email me, thanks again.