Updating AD accountExpires field not taking effect

[David A Parker]

In C# I am able to set the initial value of accountExpires when I create an Account, but when I use the same code to try and update that value later, it does not take effect - the accountExpires field retains its original value.

The code I am using is (account is a DirectoryEntry):

account.Properties["accountExpires"].Value = Convert.ToString(expire.ToFileTime());

Where expire is a DateTime.

I have also tried

account.InvokeSet("AccountExpirationDate", new object[] { expire });

because I found an example of somebody doing that.

Is there any permission or whatever that would allow the executing user to initially create an accountExpires value, but not to update it later?

Thanks in advance for any clues!

Continue reading...