[isalist] Re: VPN Clients and Password Expiry
- From: Jim Harrison <Jim@xxxxxxxxxxxx>
- To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 3 May 2012 17:54:14 +0000
http://www.ISAserver.org
-------------------------------------------------------
I'm a little curious about his filetime to datetime conversion.
Literally speaking, a FileTime struct (it's not really a number) contains a
LoWord and a HiWord; each is a 32-bit number representing half of a 64-bit
number that indicates (as he describes) the number of nanoseconds since
1600/1/1 00:00:00.
His conversion process sounds "logical", but it's not "literally correct",
since the FromFileTime method expects the FileTime value to be presented in a
form reversed (Big-Endian) than its native form (Little-Endian).
Here's a PS function I wrote to perform that action correctly:
function Convert-FileTimeToDateTime
{
################################################################
#.Synopsis
# Converts a Windows 8-byte FileTime value into a DateTime
#.Parameter ByteArray
# a Byte array representing the FileTime
#.Description
# Produces a DateTime struct from a big-endian FileTime value
################################################################
[CmdletBinding()]
Param
(
[Parameter(Mandatory=$True)][Byte[]] $ByteArray
)
[Array]::Reverse($ByteArray)
[String] $ByteString = [String]::Format("0x{0}",
[BitConverter]::ToString($ByteArray).Replace('-', ""))
[DateTime] $DateTime = [DateTime]::FromFileTime($ByteString)
return $DateTime
}
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Joe Pochedley
Sent: Thursday, May 03, 2012 8:28 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: VPN Clients and Password Expiry
http://www.ISAserver.org
-------------------------------------------------------
In case you need a script to perform this task, here's a very well written one!
http://theessentialexchange.com/blogs/michael/archive/2012/01/17/sending-an-email-to-users-whose-password-is-about-to-expire-a-powershell-rewrite.aspx
Joe Pochedley
Network & Telecommunications Manager
Fives North American Combustion, Inc.
v: +1 216.206.5505
f: +1 216.641.7852
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Tom Rogers
Sent: Friday, April 27, 2012 4:31 PM
To: 'isalist@xxxxxxxxxxxxx'
Subject: [isalist] Re: VPN Clients and Password Expiry
http://www.ISAserver.org
-------------------------------------------------------
Thx Jim, good to know, I will pass on the info.
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Jim Harrison
> Sent: Friday, April 27, 2012 4:26 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: VPN Clients and Password Expiry
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Sadly, there's nothing ISA or TMG bring to this problem, since it's
> strictly a RRAS limitation.
> It's one of the limitations of RRAS that it doesn't forward the
> "expired password" state to the user; it just fails the login.
>
> About all you can do is set up an email alert when the user's
> lastpwchanged date is within x days of expiry.
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Tom Rogers
> Sent: Friday, April 27, 2012 10:39 AM
> To: 'isalist@xxxxxxxxxxxxx'
> Subject: [isalist] VPN Clients and Password Expiry
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Using TMG 2010 on W2K8 R2 box. Win7 VPN Clients coming in.
>
> Normal internal domain users get the Domain Password Change message 7
> days in advance of when they need to change their network passwords,
> but VPN users have complained that they do not.
>
> Anyone experience this, is there a fix?
>
> TIA,
>
> -TRogers
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
