Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[README] Add password expiration #587

Merged
merged 2 commits into from
May 15, 2024
Merged

[README] Add password expiration #587

merged 2 commits into from
May 15, 2024

Conversation

Ana06
Copy link
Member

@Ana06 Ana06 commented Apr 22, 2024

A password expiration blocks the FLARE-VM installation as it asks to change the password after a restart. I had this issue today. Document how to set Password never expires in the user properties in lusrmgr.msc to avoid the issue.

@Ana06 Ana06 added the 📄 documentation Improvements or additions to documentation label Apr 22, 2024
@Ana06 Ana06 self-assigned this Apr 22, 2024
@emtuls
Copy link
Member

emtuls commented Apr 23, 2024

Is this something that we could automate and do early during the installation process?

It seems to just require running WMIC USERACCOUNT WHERE Name='<username here>' SET PasswordExpires=FALSE, but I could be wrong.

@Ana06
Copy link
Member Author

Ana06 commented Apr 23, 2024

@emtuls

It seems to just require running WMIC USERACCOUNT WHERE Name='' SET PasswordExpires=FALSE, but I could be wrong.

have you tried this? It doesn't work for me:
image

It would be a better solution to add this to the installer (maybe similar to the checks).

@emtuls
Copy link
Member

emtuls commented Apr 23, 2024

Whoops. That is how you would do it in Command Prompt.
It would be a little different if doing it from Powershell: Set-LocalUser -Name "<username here>" -PasswordNeverExpires $true

Command Prompt
image

Powershell
image

Use `$Env:UserName` to get the user name. Environment variables can be
modified by the user, but for our check, I think it is good enough and
simpler than the previous approach.
A password expiration blocks the FLARE-VM installation as it asks to
change the password after a restart.
Copy link
Member

@emtuls emtuls left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good! Thanks for making this happen!

@Ana06 Ana06 merged commit 9ca1ebe into mandiant:main May 15, 2024
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
📄 documentation Improvements or additions to documentation
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants