Unable to active account in AD when account is disabled

[jp1...@gmail.com]

I'm using PWM 1.7.1, and users who just forgot their password can re-set it. But when you use powershell to create a new account, it's disabled. And PWM just barfs when users try and set the password - giving me a Directory Unavailable message. If I manually enable the account, the user can activate the account and set their password...

I tried using before and after actions to set the LDAP value of userAccountControl to 512 which seems to be what it is if enabled - but this doesn't work either...

Any ideas?

[jeve...@bshp.edu]

We use the User Activation for AD (PWM 1.7.1) and it works fine, this is what I have,

Query Match

(&(userAccountControl=514)(!(info=SelfActivated)))

Activation before password change

userAccountControl ldap 512

Post-Activation Actions

Name: info, Action: ldap attribute: info value: SelfActivated
--


CONFIDENTIALITY NOTICE:
This e-mail together with any attachments is proprietary and confidential;
intended for only the recipient(s) named above and may contain information
that is privileged. You should not retain, copy or use this e-mail or any
attachments for any purpose, or disclose all or any part of the contents to
any person. Any views or opinions expressed in this e-mail are those of the
author and do not represent those of the Baptist School of Health
Professions. If you have received this e-mail in error, or are not the
named recipient(s), you are hereby notified that any review, dissemination,
distribution or copying of this communication is prohibited by the sender
and to do so might constitute a violation of the Electronic Communications
Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify the
sender and delete this e-mail and any attachments from your computer.