Mit VBS passwortgültigkeit im AD auslesen

'========================================  
' First, get the domain policy.  
'========================================  
Dim oDomain
Dim oUser
Dim maxPwdAge
Dim numDays
  
strDomainDN = "testAD.com"  
strUserDN = strDomainDN & "/CN=koluschkiB,CN=Users,DC=testAD,DC=com"  
    
Set oDomain = GetObject("LDAP://" & strDomainDN)  
Set maxPwdAge = oDomain.Get("maxPwdAge")  

'========================================  
' Calculate the number of days that are  
' held in this value.  
'========================================  
numDays = CCur((maxPwdAge.HighPart * 2 ^ 32) + _
                    maxPwdAge.LowPart) / CCur(-864000000000)
Msgbox = ("Maximum Password Age: " & numDays)  
    
'========================================  
' Determine the last time that the user  
' changed his or her password.  
'========================================  
Set oUser = GetObject("LDAP://" & strUserDN)  

'========================================  
' Add the number of days to the last time  
' the password was set.  
'========================================  
whenPasswordExpires = DateAdd("d", numDays, oUser.PasswordLastChanged)  
    
msgbox = ("Password Last Changed: " & oUser.PasswordLastChanged)  
msgbox = ("Password Expires On: " & whenPasswordExpires)  

'========================================  
' Clean up.  
'========================================  
Set oUser = Nothing
Set maxPwdAge = Nothing
Set oDomain = Nothing

msgbox = ("Done")  

'========================================  
' First, get the domain policy.  
'========================================  
Dim oDomain
Dim oUser
Dim maxPwdAge
Dim numDays
  
strDomainDN = "GOE.AD.SYCOR.de"  
strUserDN = strDomainDN & "CN=******* *******,CN=Users,DC=***********,DC=**"  
    
Set oDomain = GetObject("LDAP://" & strDomainDN)  
Set maxPwdAge = oDomain.Get("maxPwdAge")  

'========================================  
' Calculate the number of days that are  
' held in this value.  
'========================================  
numDays = CCur((maxPwdAge.HighPart * 2 ^ 32) + _
                    maxPwdAge.LowPart) / CCur(-864000000000)
Wscript.Echo "Maximum Password Age: " & numDays  
    
'========================================  
' Determine the last time that the user  
' changed his or her password.  
'========================================  
Set oUser = GetObject("LDAP://"& strDomainDN)  

'========================================  
' Add the number of days to the last time  
' the password was set.  
'========================================  
whenPasswordExpires = DateAdd("d", numDays, oUser.pwdlastset)  
    
Wscript.Echo "Password Last Changed: " & oUser.pwdlastset  
Wscript.Echo "Password Expires On: " & whenPasswordExpires  

'========================================  
' Clean up.  
'========================================  
Set oUser = Nothing
Set maxPwdAge = Nothing
Set oDomain = Nothing

Wscript.Echo "Done"  

Const ADS_UF_DONT_EXPIRE_PASSWD = &h10000
Const E_ADS_PROPERTY_NOT_FOUND  = &h8000500D
Const ONE_HUNDRED_NANOSECOND    = .000000100
Const SECONDS_IN_DAY            = 86400

Set objUser = GetObject("LDAP://CN=******* *******,CN=Users,DC=***********,DC=**")  

intUserAccountControl = objUser.Get("userAccountControl")  
If intUserAccountControl And ADS_UF_DONT_EXPIRE_PASSWD Then     ' LINE 11  
    WScript.Echo "The password does not expire."  
    WScript.Quit
Else
    dtmValue = objUser.PasswordLastChanged
    If Err.Number = E_ADS_PROPERTY_NOT_FOUND Then               ' LINE 16  
        WScript.Echo "The password has never been set."  
        WScript.Quit
    Else
        intTimeInterval = Int(Now - dtmValue)
        WScript.Echo "The password was last set on " & _  
          DateValue(dtmValue) & " at " & TimeValue(dtmValue)  & vbCrLf & _  
          "The difference between when the password was last" & vbCrLf & _  
          "set and today is " & intTimeInterval & " days"  
    End If

    Set objDomain = GetObject("LDAP://DC=***********,DC=**")  
    Set objMaxPwdAge = objDomain.Get("maxPwdAge")  

    If objMaxPwdAge.LowPart = 0 Then
        WScript.Echo "The Maximum Password Age is set to 0 in the " & _  
                     "domain. Therefore, the password does not expire."  
        WScript.Quit
    Else
        dblMaxPwdNano = _
            Abs(objMaxPwdAge.HighPart * 2^32 + objMaxPwdAge.LowPart)
        dblMaxPwdSecs = dblMaxPwdNano * ONE_HUNDRED_NANOSECOND  ' LINE 37  
        dblMaxPwdDays = Int(dblMaxPwdSecs / SECONDS_IN_DAY)     ' LINE 38  
        WScript.Echo "Maximum password age is " & dblMaxPwdDays & " days"  

        If intTimeInterval >= dblMaxPwdDays Then
            WScript.Echo "The password has expired."  
        Else
            WScript.Echo "The password will expire on " & _  
              DateValue(dtmValue + dblMaxPwdDays) & " (" & _  
              Int((dtmValue + dblMaxPwdDays) - Now) & " days from today)."  
        End If
    End If
End If