Set Active Directory "accountExpires" to "Never"

[rhia]

Hi folks:

This might be way easier than I think, but I can't find it.

So, I set accountExpires all the time via the "update AD" action - but I've never had to blank it out before.

How do I use that action to set accountExpires to "Never"? 

Thanks!

[mlauer]

[rhia]

Hmm... interesting, but, that's for the PW ... not for the account itself. Wouldn't you be able to have "password never expires" for an account that is set to expire on dec 31?

[mlauer]

Sorry, I didn't read that correctly. Does the date have to be reset or can it simply be a date far into the future?

[rhia]

Has to be completely blank, no expiry date at all.

I suppose I could set it to the year 3030 or something but they want it well and truly blank.

[rhia]

‌  ‌  ‌  ‌  ‌  ‌


HAAAAAAAAAAAALP! Haha. (Please!)

[vadim_tabakman]

Set the "accountExpires" property to 9223372036854775807

[rhia]

Ah yes in the year 30828! 

I wonder how this displays in Active Directory? Does it appear as blank?

I'm now reading this: 

AD accounts that have been set up to never expire are expiring 

[vadim_tabakman · Accepted solution]

I went into AD and set the Account Expires to a date next year.

Then used Update AD User and set the accountExpires to that number. When I looked at the user in AD, it was set to "Never expires".

[rhia]

AMAZING!

My hero, yet again, is the infamous ‌

I thank you, sir.