C# .NET - How to get password expiration date for a user in Active directory

Dear Friends,

I want to display the password expiration date or last date of password changed in a form.

Please help me to get this solution.

Regards,

lovedotnet

We can retrieve the accountExpires property for the account.
Account-Expires
The date when the account expires. This value represents the number of 100 nanosecond intervals since January 1, 2026 (UTC). A value of 0 or 0x7FFFFFFFFFFFFFFF (9223372036854775807) indicates that the account never expires.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adschema/adschema/a_accountexpires.asp

And then we can calculate by comparing to today's time.
Here are some code, you may tune based on your request.
http://www.codecomments.com/archive291-2004-3-163563.html

NOTE: the LargeInteger is a AD type, so we need to add reference to the ActiveDs COM Lib in addition to System.DirectoryServices.

See this code;

 using System.DirectoryServices;
// You must add a reference to the activeds.tlb in the system32 directory. (click, website > add reference)
// Declare that you are using the ActiveDs namespace.
using ActiveDs;

public partial class StratAccountInfo : System.Web.UI.Page
{
private static string LdapADpath = ConfigurationManager.AppSettings["LdapString"];

protected void Page_Load(object sender, EventArgs e)
{
string LogUser = User.Identity.Name.Substring(User.Identity.Name.IndexOf("\\") + 1).ToString();
lblLoggedInAs.Text = LogUser;
DirectoryEntry entry = new DirectoryEntry(LdapADpath);
DirectorySearcher search = new DirectorySearcher(entry);
search.Filter = "(SAMAccountName=" + LogUser + ")";
SearchResult LDAPresult = search.FindOne();
entry = LDAPresult.GetDirectoryEntry();

// Pulling the informtion on when the password was last changed and converting it to a LargeInteger.
LargeInteger liAcctPwdChange = entry.Properties["pwdLastSet"].Value as LargeInteger;

// Convert the highorder/loworder parts of the property pulled to a long.
long dateAcctPwdChange = (((long)(liAcctPwdChange.HighPart) << 32) + (long)liAcctPwdChange.LowPart);

// Convert FileTime to DateTime and get what today's date is.
DateTime dtNow = DateTime.Now;
// I added 90 days because I know what my password expiration is set to, if not you need to pull that information and add the number of days it is set for.
DateTime dtAcctPwdChange = DateTime.FromFileTime(dateAcctPwdChange).AddDays(90);
string strAcctPwdChange = DateTime.FromFileTime(dateAcctPwdChange).ToShortDateString();
string strAcctPwdExpires = DateTime.FromFileTime(dateAcctPwdChange).AddDays(90).ToShortDateString();

// Calculate the difference between the date the pasword was changed, and what day it is now and display the # of days.
TimeSpan time;
time = dtAcctPwdChange - dtNow;
lblPwdChangedDate.Text = strAcctPwdChange;
lblPassExp.Text = strAcctPwdExpires;
lblPwdExpDays.Text= time.Days.ToString() + " day(s)";
}
}

Dear Sujit

Can u please tell me what needs to be given for below code. I mean in LdapString what we have to give and where we need to write.

private static string LdapADpath = ConfigurationManager.AppSettings["LdapString"];

Regards,

lovedotnet

NET C# LDAP library provides easy access to any LDAP compliant directory from managed code. The library enables the developers to write LDAP enabled applications that access, manage, and update information stored in Novell eDirectory or other LDAP-aware directories. We assume that the user of the library is familiar with general understanding of LDAP before using the class provided in the library.

So you need to provide it something like;

string Path = "LDAP://LDAPServer/o=company";

in your app.config file. So that in code you can use it in DirectoryEntry

Dear Sujit,

Thanks for u r kind help. Following code will display both pwd changed date and exp date. But for this we need to provide domain user id and pwd. Is there any way to get pwd from AD for a particualar user id.

My Code:

public class PasswordExpDate : System.Web.UI.Page

protected System.Web.UI.WebControls.Label Label2;

protected System.Web.UI.WebControls.Label Label3;

protected System.Web.UI.WebControls.Label Label4;

protected System.Web.UI.WebControls.Label Label1;

private static string LdapADpath = @LDAP://LDAPServerName;

private void Page_Load(object sender, System.EventArgs e)

// Put user code to initialize the page here

//Label1.Text = GetMaxPasswordAge().ToString();

try

string LogUser = User.Identity.Name.Substring(User.Identity.Name.IndexOf("\\") + 1).ToString();

//DirectoryEntry entry = new DirectoryEntry("LDAP://domain/CN=Administrator,cn=users,DC=celeb,DC=w2kdom,DC=com","xxx\\Administrator", "HO123456");

DirectoryEntry entry = new DirectoryEntry(LdapADpath),LogUser,"PWD");

DirectorySearcher search = new DirectorySearcher(entry);

// Pulling the informtion on when the password was last changed and converting it to a LargeInteger.

LargeInteger liAcctPwdChange = entry.Properties["pwdLastSet"].Value as LargeInteger;

// Convert the highorder/loworder parts of the property pulled to a long.

long dateAcctPwdChange = (((long)(liAcctPwdChange.HighPart) << 32) + (long)liAcctPwdChange.LowPart);

// Convert FileTime to DateTime and get what today's date is.

// I added 90 days because I know what my password expiration is set to, if not you need to pull that information and add the number of days it is set for.

string strAcctPwdChange = DateTime.FromFileTime(dateAcctPwdChange).ToShortDateString();

string strAcctPwdExpires = DateTime.FromFileTime(dateAcctPwdChange).AddDays(90).ToShortDateString();

// Calculate the difference between the date the pasword was changed, and what day it is now and display the # of days.

catch (Exception Ex)