This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ
Help

Who rated this post

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
jennyado
Advisor
‎2025-10-17 01:55 PM
In response to the_rock

Based on the guidence recevied from TAC, these are my comments:

SupportOldSchema Parameter

  • This parameter is defined at the Microsoft_AD profile level:
    Tables → Managed Objects → LDAP → Microsoft_AD → Common

  • Any change to this value affects all LDAP Account Units using this profile.

  • Recommendation: create a duplicate profile (e.g., Microsoft_AD_PwdChange) and assign it only to the LDAP Account Unit where the password expiration functionality is needed.

Global Option: “Enable Password change when a user's AD password expires”

  • This setting enables password-change workflows across all LDAP Account Units globally.

  • Only properly configured LDAP Account Units (correct profile, SSL enabled, write permissions, schema handling) will actually use the feature.

  • Other LDAP Account Units continue operating normally.

 

 

View solution in original post

(1)
Who rated this post