net user password never expires option

i am using net user batch file to create and add 142 user, i need to use the
password never expires option, but i am running into an issue, here is what i
have

net user ons1 #!wdfons1 /add /expires:never /passwordchg:no

the result of this is the line saying the comand completed successfully,
however when i look at the user properties, i see that the user cannot change
password selection is marked, but the password nerver expires box is not
marked.

i am running this on windows 2000 server

what have i done wrong. any help would be greatly appreciated.

 

Per C:\>net user /help

/expires:never would apply to the user account expiration, not the password.

Try this Jerold Schulman solution...

JSI Tip 9625. How can a batch set a user's UserAccountControl attribute for
'Password never expires' on or off?
<http://www.jsifaq.com/SF/Tips/Tip.aspx?id=9625>

 

this does not look like it is working for me. it may just be me, i am new to
scripting, i have written 3 .vbs and about 5 .bat and i am still an infant at
it, learning more and more each day. can you explain to me what i would need
to do to set it to work for me, or is there a line or 2 out of it that i need
to incorporate into the script that i have?

thanks again
brian metzger

 

Where is it failing?
Did you change the @echo off to @echo on, remove the >nul 2>&1
and log the output?


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com

 

i did not, i have now, this is what i have

@echo on
setlocal
if {%2}=={} goto err
set ons1=%1
set YN=%2
set /a pnx=65536
set /a upnx=0
if /i "%YN%" EQU "Y" goto swok
if /i "%YN%" NEQ "N" goto err
:swok
set /a userAccountControl=999999999
call :getusr
if %userAccountControl% EQU 999999999 goto usrnf
if /i "%YN%" EQU "N" goto setoff
set /a upnx=%userAccountControl% ^& %pnx%
if %upnx% EQU %pnx% goto finish
set /a userAccountControl=%userAccountControl% ^| 65536
call :updusr>
goto finish
:setoff
set /a upnx=%userAccountControl% ^& %pnx%
if %upnx% NEQ %pnx% goto finish
set /a userAccountControl=%userAccountControl% ^^ 65536
call :updusr
:finish
endlocal
goto :EOF
:err
@echo Syntax: PwdNX ons1 Y^|N
endlocal
:usrnf
@echo Syntax: PwdNX ons1 Y^|N - %ons1% NOT found.
endlocal
goto :EOF
:getusr
for /f "Tokens=2 Delims=: " %%a in ('adfind -b %ons1% -nodn -noctl
userAccountControl^|find /i "userAccountControl"') do (
set /a userAccountControl=%%a
)
goto :EOF
:updusr
admod -b %ons1% "userAccountControl::%userAccountControl%"



this is what the results are:
the user name i am testing is ons1

password never expires option is still not checked.

and the cmd prompt shows the following

i ran from cmd prompt

c:\>pwdnvrx.bat
(this is the result)
c:\>setlocal

c:\>if {} == {} goto err
syntax PwdNX ons1 Y:N

c:\>endlocal
Syntax: PwdNX ons1 Y:N - NOT found.

c:\>endlocal

c:\>goto :EOF

c:\>

what have i messed up.
thanks for your help
brian metzger

 

Are you being funny or just dense?

1. DO NOT modify the batch file. Copy/Paste it just as it is.
2. At the CMD.EXE prompt, type:
pwdnx UserDN Y
where UserDN is the distinguished name of ons1.

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com