I'm trying to convert lockout time from the current AD lockouttime to 30
mins later and insert that into loginintruderresettime. I have some
code below but am having some issues with finalizing the code. I would
greatly appreciate any help.

So Far I have this:

<?xml version="1.0" encoding="UTF-8"?><driver-configuration
config-type="ScriptPolicyImpl" dn="AD.DRIVERSET01.Servers.EmoryDev"
driver-set-dn="DRIVERSET01.Servers.EmoryDev"
name="DEV-pub-ctp-HandleLockoutTime">
<children>
<rule name="Emory-pub-ctp-HandleLockoutTime">
<policy>
<rule>
<description>Emory-pub-ctp-handlockoutime</description>
<comment xml:space="preserve">This is to correct the lockouttime
attribute value when placed into the loginintruderresettime
value</comment>
<conditions>
<and>
<if-class-name mode="nocase" op="equal">user</if-class-name>
<if-operation mode="nocase" op="equal">sync</if-operation>
<if-op-attr name="lockoutTime" op="available"/>
</and>
</conditions>
<actions>
<do-if>
<arg-conditions>
<and>
<if-op-attr mode="nocase" name="lockoutTime"
op="lt">2000000000</if-op-attr>
</and>
</arg-conditions>
<arg-actions>
<do-reformat-op-attr name="lockoutTime">
<arg-value type="time">
<token-convert-time dest-format="!CTIME" dest-tz="UTC"
src-format="!FILETIME" src-tz="UTC">
<token-local-variable name="current-value"/>
</token-convert-time>
</arg-value>
</do-reformat-op-attr>
</arg-actions>
<arg-actions/>
</do-if>
</actions>
</rule>
</policy>
</rule>
</children>
</driver-configuration>


--
jburns80
------------------------------------------------------------------------
jburns80's Profile: https://forums.netiq.com/member.php?userid=10701
View this thread: https://forums.netiq.com/showthread.php?t=57418