4.4.11 Changing the user password in the Active Directory
Function
This plug-in changes the user password for the Active Directory of the specified server.
The prerequisite server for this plug-in is as follows:
- Execution target server
This server is used as the target for executing this plug-in. The Active Directory shown in the Prerequisite condition needs to be set up beforehand.
Scripts in this plug-in perform the following processing:
- Execution of the following command
dsmod user
"value-of-user-identifier(Windows.userName-property)"
-pwd "value-of-password(Windows.accountPassword-property)"
For details of the dsmod user command, see the relevant sections in the Microsoft library.
Use situation
This plug-in is used to change the user password in the Active Directory.
Prerequisites
For the latest support status of the following items, see the Release notes: Prerequisite products on the execution target server, and running OS on the execution target server.
In addition, the following OS and products use abbreviations. For the abbreviations of OS and products, see the "Preface".
Prerequisite products on the execution target server:
(1) Active Directory domain service
(2) DNS server
Running OS on the execution target server:
(1) Windows Server
Conditions of using prerequisite products on the execution target server:
None
Cautions
(1) Do not use a character string containing a double quotation mark (") or a single quotation mark (') in a plug-in property.
(2) You cannot specify a null character for a password (Windows.accountPassword property) or password re-entry (Windows.accountPasswordReEnter property).
(3) Do not specify only an asterisk (*) for the password (Windows.accountPassword property).
Execution privilege
(1) When connecting to the execution server, the user needs to be a member of the Account Operators group, Domain Admins group, or Enterprise Admins group of the Active Directory domain service; and have proper authority.
Version
02.00.00
Plug-in tags
Configure Active Directory,Windows,Active Directory
Plug-in name displayed in the task log
adChangePassword
Return code
0: Normal
12: Abnormal (user mistake), illegal property
21: Abnormal (illegal environment), command unfound (error detected in plug-in script)
27: Abnormal (Check the error details from the task log.)
41: Abnormal (error detected within the plug-in), property not entered (error detected in the plug-in script)
Property list
The following table lists the properties:
|
Property key |
Property name |
Description |
Default value |
I/O type |
Required |
|---|---|---|---|---|---|
|
plugin.destinationHost |
Host name of the execution target server |
Specify the host name or IP address of the server on which this plugin will be executed. IPv6 addresses are not supported. |
-- |
Input |
R |
|
Windows.userName |
User identifier |
Specify an identifier of the user for which you want to change the password in a format beginning with CN=. |
-- |
Input |
R |
|
Windows.accountPassword |
Password |
Specify a password after a user change. |
-- |
Input |
R |
|
Windows.accountPasswordReEnter |
Password re-entry |
Re-enter the password after a user change. |
-- |
Input |
R |
|
common.returnValue |
Return value for the plugin |
The return value of this plugin stored. |
-- |
Output |
O |