Okay, so I ran into this weird issue today with Active Directory, and let me tell you, it was a head-scratcher for a bit. It all started when I was trying to set up some temporary accounts for contractors. The idea was simple: create the accounts, set an expiry date, and have everything neat and tidy.
I created the user accounts, no problem. Went into the account properties, you know, the usual drill. I found the “Account expires” section and set the date. I clicked “Apply”, “OK”, and thought I was done. Easy peasy, right? Wrong!
I checked a few other things about those users and soon noticed somthing, and I noticed the “admit until” date wasn’t matching up with the expiry date I just set. It was showing some default value, definitely not what I had just entered. Talk about confusing!
Digging Deeper
I tried changing the expiry date again, double-checking everything. Still no luck. The “admit until” date stubbornly refused to update. I even tried doing it through PowerShell, thinking maybe the GUI was glitching out on me. Nope, same problem.
At this point, I was getting a bit frustrated. I mean, it should work, right? It’s a pretty basic function. So, I started poking around online, looking for answers. Turns out, I wasn’t the only one who’d experienced this.
The “Aha!” Moment
After some searching, I found out it’s a known… quirk, let’s call it. Apparently, the “admit until” date, which dictates user logon time limit, doesn’t get automatically synced with the “Account expires” * have to set them separately.
So, the fix was actually pretty simple, but not super obvious. Here are the steps I took.
- First I created the users.
- Located users.
- Then I set the “Account expires” date, like I normally would.
- After that I select all the users needed to be set.
- Finally, I use PowerShell command “Set-ADUser -LogonTimeLimit” to manually set the “admit until” date, making sure it matched the expiry date.
And that’s it! After I did that, everything was in sync. The accounts would expire when they were supposed to, and the “admit until” date reflected the correct time.
It was a bit of a learning experience, to be honest. It just goes to show that even seemingly simple tasks can have hidden quirks. The important thing is to keep digging until you find the solution, and hopefully, my little adventure here will save someone else some time and frustration!
