Pwpolicy -- how to determine if a user's account is disabled?

Hi all...
For my user accounts, I have the accounts set to disable after 180-days of non-use.
I'd like to be able to determine which accounts *have been disabled* because of this. Graphically, I can only see this in WorkGroup Manager when a user actually tries to log in to their account and it fails because of this -- then the user gets an "X" next to their name in WGM.
But this "X" doesn't appear unless the user tries to access his/her account.
For example, here's the policy on my account:
For example, here's my account
pwpolicy -getpolicy -u maser
Getting policy for maser
newPasswordRequired=0 maxMinutesOfNonUse=259200 maxChars=0 usingHistory=0 isSessionKeyAgent=0 isComputerAccount=0 maxMinutesUntilDisabled=0 requiresAlpha=0 hardExpireDateGMT=01/01/70 minutesUntilFailedLoginReset=0 requiresMixedCase=0 passwordCannotBeName=0 requiresSymbol=0 expirationDateGMT=01/01/70 notGuessablePattern=0 canModifyPasswordforSelf=1 maxFailedLoginAttempts=0 minChars=9 usingExpirationDate=0 requiresNumeric=0 maxMinutesUntilChangePassword=0 usingHardExpirationDate=0
This shows me that 259200 minutes (the default) will be when my account is disabled from maxMinutesOfNonUse -- but nothing about how long it's been since I've used my account.
Is there a terminal command which will show me which accounts have been disabled?
And/or a command that will show my how many "MinutesOfUse" an account has (meaning how long it's been since a user connected to my server)?
Thanks!

Similar Messages

How to determine that the user/ pernr is comp cord?

Hi,
In tcode pa30 i see there is Comp Cord field. so these are the HR persons right which use the three digits numbers.
So my question is how to determine that the user/ pernr is comp cord?
I want to create the fm and pass user id as import and want to find out where this user is belongs to comp coordinator or not.
i do see some entry in the T526 table but not sure, how it work.
Regards
Ali

hi ali,
SACHX is the field you are looking for ..
regards
Manthan Raja

How to determine if a user has access to an item

Without using the WWSEC_API, i need to find out if a user (not the logged in user) has the right privileges to view an item (url).
Has anyone identified what tables are involved in determining if a user has access to view an item ?

Create a vo with the following SQL passing userid as bind value:
SELECT C.USER_NAME,
B.RESPONSIBILITY_NAME,
A.START_DATE,
A.END_DATE
FROM APPS.FND_USER_RESP_GROUPS_DIRECT A,
APPS.FND_RESPONSIBILITY_TL B,
APPS.FND_USER C
WHERE C.USER_ID = A.USER_ID
AND C.USER_NAME= :1
AND B.RESPONSIBILITY_ID = A.RESPONSIBILITY_ID
You will have the list of all the responsibilities of a user.
Kristofer

How to find out what user locked account

We had production type schema account locked this morning. I checked profile which this user belongs and it has 3 times for Failed Login Attempts. My question is how to find out what user had 3 unsuccessful login attempts and lock this account.
Oracle version 8.1.7

Assuming that [auditing was enabled|http://download.oracle.com/docs/cd/B19306_01/server.102/b14220/security.htm#sthref2916], the command
AUDIT CONNECT WHENEVER NOT SUCCESSFULThat will write audit records when there is an unsuccessful login. Depending on how you've configured auditing, those records will either be written to the SYS.AUD$ table, in which case you can query them through a few different views, or to a file on the operating system that you can grep.
Justin

How to tell when a user's account password was reset?

Using Oracle 10g.
How does one tell when a user's account password was reset?
Thanks,
(BLL)

Dear user445775,
I didnt get timestamp. ie., getting date alone. How can i able to get it.
BANNER
Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bi
PL/SQL Release 10.2.0.4.0 - Production
CORE 10.2.0.4.0 Production
TNS for Solaris: Version 10.2.0.4.0 - Production
NLSRTL Version 10.2.0.4.0 - Production
SQL> select CTIME,PTIME from sys.user$ where name='SCOTT';
CTIME PTIME
18-JAN-08 12-JUN-10
SQL> alter user scott identified by XXXXX;
User altered.
SQL> select CTIME,PTIME from sys.user$ where name='SCOTT';
CTIME PTIME
18-JAN-08 27-JUL-10
BANNER
Oracle Database 11g Enterprise Edition Release 11.1.0.6.0 - 64bit Production
PL/SQL Release 11.1.0.6.0 - Production
CORE 11.1.0.6.0 Production
TNS for Solaris: Version 11.1.0.6.0 - Production
NLSRTL Version 11.1.0.6.0 - Production
SQL> select CTIME,PTIME from sys.user$ where name='SCOTT';
CTIME PTIME
21-APR-10 17-MAY-10
SQL> alter user scott identified by XXXXX;
User altered.
SQL> select CTIME,PTIME from sys.user$ where name='SCOTT';
CTIME PTIME
21-APR-10 27-JUL-10

How do you setup a user mobile account, with the home directory stored locally and not synced to the server?

I want to be able to setup a user mobile account, with the home directory stored locally and not synced to the server. What is the best way to do this? I am running Server 10.6 with 10.6 clients. Open Directory will be used to authenticate and manage preferences. Also, this one account will be used simultaneosly in a computer lab setting, so files will be stored locally in the client, hence the need to NOT sync to the server. Any Ideas?

currofelix wrote:
So what does WGM Look like in the Home Tab? afp://servername.domainname/Users? or afp://Users?
The attached screen shots should help you:
You will only have to do this step once. Obviously you want to use the user's shortname here.
Then, you will see this as an option in WGM:

How to determine logged in user and responsibility in pl/sql?

I created a procedure that uses owa_util.redirect_url to lauch a web application. This function is lauched by a function on an EBS menu.
Before calling the redirect I use owa_cookie.send to pass the name of the user and the responsibility using a cookie. When I refer to fnd_global.resp_id or fnd_global.user_id they are always null.
Does anyone know how I can capture the logged in user/responsibility and pass it to the web application?
Thanks,
-- Johnnie

Found a hit on metalink, not good news the Fnd_Global values are not set when calling sswa pl/sql function:
Doc ID: 726560.992
https://metalink.oracle.com/metalink/plsql/f?p=200:27:8705377808354107614::::p27_id,p27_show_header,p27_show_help:726560.992,1,1
Message was edited by:
johnniebillings

How to determine the current user id!

I have a table. And when the user insert record, I should insert the information about user who create this record in this table.
Kostya!

Here is an example of a trigger I use to populate a primary key and fetch the user
created the record:
CREATE OR REPLACE TRIGGER bi_my_table
   BEFORE INSERT
   ON my_table
   REFERENCING NEW AS NEW OLD AS OLD
   FOR EACH ROW
DECLARE
   c1   NUMBER;
BEGIN
   FOR c1 IN (SELECT my_table_seq.NEXTVAL next_val
                FROM DUAL)
   LOOP
      :NEW.primkey := c1.next_val;
      :NEW.user_created := NVL (htmldb_application.g_user, USER);
   END LOOP;
END;Denes Kubicek

How to determine the online user?

hi,
Im developing a project, in this project, i have a user login page,
Now i want to know the number of online user who r login in this site? & i also want to know the number of viewer who are vising this site? Is there anyone who can help me? Please help me
With regards
Nahar

You are probably using a session bean to hold to login state of your users.
You have an interface avaiable to you that is called the HttpSessionBindingListener. If you implement this on your session bean you can implement two methods:
valueBound() - this is called when the session bean is created
valueUnbound() - this is called when the session bean is destroyed
So using valueUnbound() you can check when the session drops, which most likely means that the user left your site. With this you can keep track of users in a static map somewhere: add a user to this static map when the bean is created and remove it again in valueUnbound(). Then you can use this static resource to easily know your online users and their login state.

How do you establish multiple users and accounts with TM?

I"ve had great success with TM. I have a Macbook Pro and an iMAC which are working well with TM, but recntly bought my wife a Macbook and want to also connect it to TM.
How do you establish unique logins from each MAC to TM so users only have access to their data? I can setup my new Macbook with TM but it appears to only take the user/password that I have already established; can I have more than one user/password established on TM or do all users have to share the same account?

How to use multiple iPhone, iPad, or iPod devices with one computer

How to determine the exact key pressed when numlock disabled?

Hi there,
I am trying track the keyboardevent that triggered by pressing numpad keys as hotkey, but when the numlock is disabled, the same keycode, same keylocation was gotten as pressing in the standard keyboard. how can I determine if the numpad was pressed or the other control keys were pressed?
Thank you!
Andy

Hi there,
I am trying track the keyboardevent that triggered by pressing numpad keys as hotkey, but when the numlock is disabled, the same keycode, same keylocation was gotten as pressing in the standard keyboard. how can I determine if the numpad was pressed or the other control keys were pressed?
Thank you!
Andy

New Server: How do we aim ALL users email accounts to use the new addresses

We have a new server which we are using for mail (incl. smtp), we need to be able to make it so when a user logs in and loads mail (just like they would have done before) it finds their new email account as seamlessly as possible.
In a windows environment (*i know i heard the groan before i said it but thats the system i know*) i know exchange would force all of the new settings through to each user remotely. Does apple have a solution like this or are we really going to have to login as each user and setup their accounts for them. This would take literally weeks.
I'm pretty sure there is a way to do this, but i couldn't find any previous posts about it.... hope this is in the right place edit:now and i will be extremely grateful to anyone who can help me with this issue.
Other Info: Mac OSX server environment with approx 260 Macs on Tiger, Mail version 2.1 and over 900 users. 100 of whom have been transferred manually by setting the accounts up and entering settings in each of the users mail applications. each user is using roaming profiles so when it's done once it's done over the entire network.

Thanks for the feedback am trying to work on a script now but can't get enough info about applescript, There is a setting in workgroup manager which says email when it is activated and we type in the users email address it should be feeding through from the next logon. This isnt the case for some reason.
All mail is backed up and ready to reinstate if necessary, our other problem with documentation or any kind of user input is that we are a primary school with an entirely MAC network with only two technical support and i was based from a windows background...... *** to be us at the moment. lol
If this was exchange we'd just link to Active directory and be done with it.......
Thank you for your responses i can't seem to say anyone was helpful at the moment site error.... any more ideas will be gladly accepted. (goes off hunting for more applescript documentation)
(does anyone know how to make applescript echo the username back to itself and then set it as a variable? then i need to combine it so something like this....
set theEmailAddress to {echoedresponse, "@thisemailaddress.com"}
that at least would let me set the script to work with only a little input from the user....... i hope infants can type two letters correctly if they are starred out.

Windows users - "Access Account" gets disabled by server every night?!?

I have an OS X Server 10.4.7 on a new Mac Pro in our office. All of my windows users connect to a basic Windows fileshare using the server's IP, then I map the network drives, so they should auto connect. I connect the users, verify the connection, log out, log back in, the drives re-connect like normal. However, TWICE now, I verify that thye all work, then the next morning (or over the weekend), it's like the OS X Server disabled everyone's accounts, except mine (i'm an adminstrator account). Nobody can get to their shares, and all the "Access Account" checkboxes on all my users are unchecked.
I have Open Directory set as an OD Master, with default policies.
Under Windows I have it set as a PDC (I'll migrate my old domain accounts once I have the server working, unless this is my whole problem)
I disabled the file share of "users", but I can't see why that would be my problem. It works until overnight, seemingly.
Ideas?

System.log has thousands of these:
Sep 18 07:47:32 Genesis1 kernel [0]: (11997: ps) ftp: failed on 0:
asl.log has a bunch of these:
[Time 2006.09.18 17.29.48 UTC] [Facility daemon] [Sender DirectoryService] [PID 63] [Message Failed Authentication return is being delayed due to over five recent auth failures for username: anish.] [Level 1] [ UID -2] [GID -2] [Host Genesis1]
The only thing I've set up on any machine is network drive connections, and I manually entered names and passwords. Not sure if XP is doing anything else on its own.
- Bill

How to determine the Comp Cord / comp coordinator / Company Coordinator.

Hi,
In tcode pa30 i see there is Comp Cord field. so these are the HR persons right which use the three digits numbers.
So my question is how to determine that the user/ pernr is comp cord?
I want to create the fm and pass user id as import and want to find out where this user is belongs to comp coordinator or not.
i do see some entry in the T526 table but not sure, how it work.
Regards
Ali

Hi Ali,
Administrators and administrator groups are configured via the following SPRO step:
Personnel management - Personnel administration - Organizational data - Organizational assignment - Define adm group & define administrators.
However, as far as I understood, you want to have a backward way.
I mean, you want to know which of your employees are comp coordnator/administrator?
Is it right?
If yes, there is, unfortunately, no connection between employee master records and administrator records.
Regards,
Dilek

How to lock a user's account

Hi there,
In Solaris 9, how can I lock a user's account. By saying lock, I don't want to delete the account and any user's date under his home directory, I just want to inactivate it. I chceked the man page of useradd but I couldn't find it.
Any related informationa is highly appreciated!

Not sure if anything has changed from Solaris 8 to 9 but you should be able to use the passwd command. Use,
$passwd -l username
This will lock the account.
To activate the account again use the passwd command like,
passwd username
Then specify the password.

Pwpolicy -- how to determine if a user's account is disabled?

Similar Messages

Maybe you are looking for