Home page logo
/

pauldotcom logo PaulDotCom mailing list archives

WMIC help
From: herrasher at gmail.com (Kennith Asher)
Date: Thu, 11 Jun 2009 09:50:06 -0700

The problem here appears to be one of interrogating the correct node with
the correct context.

I was hopeful that I could interrogate a domain controller using the /node:
context but that doesn't appear to function as expected either.

I am able to interrogate any system where a user has logged in using the
following context:

wmid /node:"domain" netlogin where (Name like "%username") GET
PasswordExpires

The requirement appears to be that the user must have logged into the
system.

Ken

On Thu, Jun 11, 2009 at 9:42 AM, Michael Douglas <mick at pauldotcom.com>wrote:

Bah.  This doesn't work... you have to enter the actual user's password.

Sorry for the bum advice!
- Mick



On Wed, Jun 10, 2009 at 8:55 PM, Michael Douglas<mick at pauldotcom.com>
wrote:
If you're an admin, you should be able to force the wmic check to
happen in the scope of another user.

wmic /user:"domain\user" netlogin get passwordexpires
(note you'll likely need to keep the quotes in the line above. wmic is
very picky about global flag values.)

I believe this will work... But I'm not VPNed into my lab at work
right now to test and see.  Please let us know if this works as you
wanted it to.

My answers might be wrong, but they're FAST!   ;-)
- Mick

On Wed, Jun 10, 2009 at 4:29 PM, Kennith Asher<herrasher at gmail.com>
wrote:
Hey all you WMIC gurus out there.  I'm trying to find a straightforward
means of identifying when a domain user's password will expire.  Is
there a
modifier or switch I can set to bring back password expiry for another
domain user?

I know I can use:

Wmic netlogin get passwordexpires

to find when my password expires, can this be done for another domain
user?
Assume I have admin privileges.

Oh, and just so that we're clear here, this is for the domain we use at
work, I am doing this on behalf of a user I support.

Thanks,

Ken

_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20090611/3b83614a/attachment.htm 


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]