Univention Bugzilla – Bug 54227
account/userexpiry shown in UMC/UDM differs from value shown in MS ADUC
Last modified: 2023-03-23 11:12:43 CET
The GUI tool "Active Directory Users and Computers" (ADUC) doesn't show the actual value of the Active Directory attribute "accountExires", but rather it shows the last day, when the account is still usable. Example: If I select "today" (2021-12-08) in ADUC then it interprets this as end of day localtime and writes: accountExpires: 132834780000000000 which is GMT: Wed, 08 Dec 2021 23:00:00 GMT Your time zone: Thu Dec 09 2021 00:00:00 GMT+0100 (Central European Standard Time) UMC/UDM behave differently and show the day that the account actually is exired. In my example UMC shows "09.12.2021" and UDM shows userexpiry: 2021-12-09. This means that administrators may get confused by the difference between the dates shown in MS ADUC and UMC/UDM. Maybe we should improve the tooltip and documentation to explain this.