Posts

Showing posts from June, 2015

DFSUtil fails to create target folder but GUI does

hi all, trying use dfsutil create dfs links along associated shares. equivalent of creating new folder in namespace , specifying share doesn't exist target. dfs console warns doesn't exist , prompts allow create. works flawlessly in gui. now i'm trying script of these things out using dfsutil command line , can create target , add links fine, folders referenced never show in file system. dfsutil.exe link add \\mydfs.name.local\share\xyz \\server01\share\xyz the result command completes successfully. can see link there , it's correct. checks out, gui confirms this. difference folder specified in \\server01\share\xyz never gets created. link in namespace shows fine at: \\mydfs.name.local\share\xyz it's unclickable since it's referencing target doesn't exist. if later issue target add command: dfsutil.exe target add \\mydfs.name.local\share\xyz \\server02\share\xyz that completes successfully. however, previous case, see added target in gui ...

port 8080 not responding

when try install program ( etabs 2013 ) on installation got message  ( port 8080 not responding )                    i don't understand relation between etabs should installed without internet connection , port 8080 windows 8.1 is port in use? check me please. run cmd admin cmd netstat -b netstat -b give ip address, port number , executable using connection/port stream , if there established connection or executable waiting connection. fyi: products released prior 2/4/2014, ports 8080 , 8443 used instead of ports 80 , 443 licensing checks. Windows Server  >  Platform Networking

See who done what in AD

i know, if there way can see done in ad need know added ad group machine, any ideas on best way please? we have 4x server 2012 , 2 of them hold 5 fsmo roles we have 6 other dc's in different sites on server 2003 any appreciated :) hi riley, i assume referring auditing? https://technet.microsoft.com/en-gb/library/cc731607(v=ws.10).aspx best regards, please remember mark replies helpful if help, or answers if answer question. please unmark answers if provide no help. zach roberts independent microsoft community support advisor disclaimer: don't work microsoft. advice given own , not represent microsoft. follow me on twitter: @windowszach Windows Server  >  Directory Services

WSUS Design - Best Practices

my organization made of 5 branch offices, totalling approx 800 workstations , 30 (physical , virtual) servers.  our current wsus structure has 1 physical server @ each branch, update approval/denial process takes place, , branch's computers report to. when looking redesign better administration, thinking of making virtual master wsus server @ 1 site - feed 1 physical replica server @ each branch.  in long run, not change - other taking away need 5 admins, needing 1 admin @ master level. is thought of keeping 5 physical servers @ each branch overkill?  each have many other roles, wsus 1 more thing servers 'serve-up'.  thought keeping them - keep update download flows channeled through site server, not master (which in 4 cases remote site). thanks advice. -mark- is thought of keeping 5 physical servers @ each branch overkill?  unless have specific organizational reasons having distributed update approval strategy in organization, 5 autonomous wsu...

Windows Firewall GPO don't add registry key on some servers?

hi, we add windows firewall settings gpo - "windows firewall advanced security" our servers. but on servers have windows firewall enable gpo but don't have  hklm\software\policies\microsoft\windowsfirewall\domainprofile  enablefirewall registry key set 1. fw rules there if in control panel\all control panel items\windows firewall , says manage administrator. so know why registry key not set gpo?  /saitech hi, before go further, please run gpresult /h command view group policy report if gpo applied on clients. if gpo not applying, check following article common reasons try troubleshooting: 10 common problems causing group policy not apply http://social.technet.microsoft.com/wiki/contents/articles/22457.10-common-problems-causing-group-policy-to-not-apply.aspx , check if ms16-072 installed on clients , domain controllers might cause user group policy not working, if case, please use group policy management console (gpmc.msc) , add ...

Q about virtual labs; Access and Information Protection Lab

hello, i've been struggling several hours virtual labs course: access , information protection lab should setup a claimapp. i've been through steps of first exercise several times , login screen, after login error appears: 405-http verb/invalid method used attempt access. instead of listing claims in security token (step 3 of 2nd excercise). the workplace join part works , got intclient1 connected. i've searched solution can't find any. please let me know i'm doing wrong did follow exact steps in provided document. reply in advance. for claims-based access platforms questions, recommend asking them here: https://social.msdn.microsoft.com/forums/vstudio/en-us/home?forum=geneva this posting provided no warranties or guarantees , , confers no rights. ahmed malek my website link my linkedin profile my mvp profile Windows Server ...

Microsoft Office Word 12.0.6668.5000 12.0.6612.1000

hello all, my word student cesion give following error message:  microsoft office word 12.0.6668.5000 12.0.6612.1000 please advice hans for general troubleshooting, take @ knowledge base article @ http://support.microsoft.com/kb/921541/en-us . stefan blom, microsoft word mvp Microsoft Office  >  Word IT Pro Discussions

Domain Controller Configuration Error

Image
dear all,       need you.i setting windows server 2012 , facing below error.can 1 me below solution. thanks, quality communication provides quality work. http://siddiq-sharepoint2010.blogspot.in/ siddiqali mohammad . you need configure tcp/ip configuration. provide static ip , give dns on tcp/ip configuration same ip of server ip. run configuration again. please remember, if see post helped please click "vote helpful" , if answered question, please click "mark answer" mai ali | blog: technical | twitter: mai ali Windows Server  >  Windows Server 2012 General

Problem with Domain Trust

hi, we're running following tfs 2012-setup (update 3) on windows server 2012: domain (productive) domain b (tfs-services) there one-way trust between domains. when want users connect tfs, create "local security groups" in domain b , add users domain groups. works fine, when add users directly. when add groups domain a, authentication fails. is there known problem nested groups? thanks hints on issue! the problem was, service account, under tfs service runs, wasn't trusted production domain , therefore member of groups couldn't resolved. first option: change service account, under tfs runs, account production domain second option: change trust two-way-trust Windows Server  >  Directory Services ...

Prevent users install software on Windows Terminal Server 2003

hey i have terminal server 30 - 35 users ( hp dl380 g5 5345 16gb of ram) i mentioned new software installed on terminal server. basically users can not install software on terminal server, there applications allow users install them instance   " gom player" ,"vlc" , etc.... what can prevent them install these kind of apps. mehdi.z with software restriction policies can start out with a blanket deny (deny front) , loosen permissions applications want run.  prevent users installing anything. Windows Server  >  Remote Desktop Services (Terminal Services)

Windows Server 2008 SP2 bluescreen, help me to decrypt the windbg rapport

i got bluescreen 5 times week on windows 2008 sp2 server : stuff installed on : arcserv 12.0 sp2 (old backup software) using sql server 2005. motorola scanner software (dunno how works communicates sap). know uses 3 services 1 using wmi. here debug : microsoft (r) windows debugger version 6.12.0002.633 x86 copyright (c) microsoft corporation. rights reserved. loading dump file [c:\windows\minidump\mini032514-01.dmp] mini kernel dump file: registers , stack trace available symbol search path is: srv*c:\websymb*http://msdl.microsoft.com/download/symbols executable search path is:  windows server 2008/windows vista kernel version 6002 (service pack 2) mp (24 procs) free x86 compatible product: server, suite: enterprise terminalserver singleuserts built by: 6002.18881.x86fre.vistasp2_gdr.130707-1535 machine name: kernel base = 0x81e4e000 psloadedmodulelist = 0x81f65c70 debug session time: tue mar 25 18:35:35.191 2014 (utc + 1:00) system upt...

SBS to Server 2016 sysvol/netlogon Folder issues

hello, i have been working on migrating dc sbs2008 server 2016.  thought done , working well.  turned off sbs server today , unable ad, gpos, etc.  did digging , found when try go domain.local when sbs server off cannot, though 2016dc powered on.  powered sbs2008 server on , found can domain.local/sysvol dfs tab under properties of sysvol still points \\sbs2008\sysvol instead of think should \\2016dc\sysvol. i have dns setup new dc2016 , did nslookup , see dc2016 address listed , sbs2008 ip listed i have run  nltest /dclist:domain.local , results below sbs2008.domain.local        [ds] site: default-first-site-name      dc2016.domain.local [pdc]  [ds] site: default-first-site-name i ran netdom /query fsmo , results below schema master               dc2016.domain.local domain naming master        dc2016.domain.local pdc    ...

Cluster Validation Tests

Image
any help is welcome i have dhcp cluster running  2 nodes. i want run validation test again .    my concern if there problem data in production. i can run validation test without problem ? for cluster validation manually; sincerely, murat demirkiran if post helps , remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. www.scvmm2012.com (tr language) please note i'm not microsoft representative or spokesperson. Windows Server  >  High Availability (Clustering)

Insert identifiers in AutoText snippet. Microsoft word

i have define autotext blocks no problem. need insert sort of identifier** along autotext block. ** identifier mean: number or letter preferably static text, unique document. example current time work.  example usage: i insert table autotext feature the first row of table has identifier unique document , static (wont update) it wonderful avoid macros. if macro way how can inserted in autotext snippet?  thanks in advance cross posted at: http://www.msofficeforums.com/word/19356-insert-identifiers-autotext-snippet-microsoft-word.html#post57449 answered in cross-post @ msoffice word forum . if must post in multiple threads, please provide notice , links. charles kenyon madison, wi Microsoft Office  >  Word IT Pro Discussions ...

PEAP suite question??

hi, know regarding peap aes comes process. example: when users tries log network via vpn, vpn using sstp , peap mschapv2 authentication, when peap trying create tunnel client, use ssl encryption suite on server machine determine algorithms use in process? , once has done this, them create key exchange using rsa example along aes encryption (the normal encryption process basically?). when these have been estrablished, mschapv2 comes play , sends username , password on in mschapv2 form in secure tunnel? is process it? thanks help. hi, >>so when peap trying create tunnel client, use ssl encryption suite on server machine determine algorithms use in process? yes. >>, them create key exchange using rsa example along aes encryption (the normal encryption process basically?). it depends on order of cipher suits configured on both client , server. , if both of them support aes involved cipher suits, aes encryption may used. >>when these have been estrabl...

Full access to be given user/group to read, write, edit, modify & update but preventation of deletion in Files and folders.

hi please guide providing full access given user/group read, write, edit, modify & update prevented of deletion in files , folders. regards, md ehteshamuddin khan opinions expressed here mine. posting provided "as is" no warranties or guarantees , confers no rights. hi, thanks post. what's specific error prompt when fail delete? could please offer more details, what's account? account in other groups? (for example, admin groups).if account in admin group, might related uac.  may require use run administrator.  please check if inherited permissions turned off file want delete. in addition, check share permissions on folder. users effective permissions combination of both share , ntfs permissions. you may check articles below. user cannot access file or folder should have permission https://technet.microsoft.com/en-us/library/cc773004%28v=ws.10%29.aspx?f=255&mspperror=-2147217396 best regards, mary dong please remem...

Remote desktop stopped working

i've tried connect 2003 standard server using xp pro , windows 7 both times error message "this computer can not connect remote computer." i've been connecting 3 years server. asked administrator try access server no luck. i've looked in logs , did not find thing thought special restarted services had terminal service. if me trouble shooting suggestions, appreciate it. thanks, mark roshak hi mark,   first of try rebooting server , see if helps.   сила в справедливости Windows Server  >  Remote Desktop Services (Terminal Services)

Slow computers on network

hi, i have problem computers on network. slow. login ok, every program long waiting start. configuration of server is operating system: windows server 2012 r2 standard 64-bit system manufacturer: hp system model: proliant ml310e gen8 v2 bios: default system bios processor: intel(r) xeon(r) cpu e3-1220 v3 @ 3.10ghz (4 cpus), ~3.1ghz memory: 4096mb ram can tell me problem server configuration or can else. do have anti virus software on server? looks have av softwre real time scanning - can slow down file opening describing. or maybe have slow disks. disk configuration have in ml310e ? radek Windows Server  >  Windows Server 2012 General

App Pool

dear sir/mam how manage or configure app pool in iis. when should increase or decrease app pool faster project on server ? but main aim faster site. how ? please elaborate possible bcz work delaying due this. thanks in  advance hiya,  first of should ask question in iis forum, should able give more accurate answer. secondly here know: the app pool defines memory context web application running within. context can define few properties on pool level. common identity , recycles. in order speed site few things @ , application pool part of this. you site collection of web pages different functionality, might require web server processing power, might rendered user download. depending on site does, different areas affect performance.  if exclude other options , application pool performance. i'd recon the important settings recycles. every time application pool recycles, page has re-rendered memory. means, first load of web page after application pool...

Is Windows Server Kernel Memory Resident

with regards windows server, kernel memory resident or reside on disk , accessed?  if memory resident, of kernel resident or portions?  i responding unsupported statements regarding windows server , operation versus unix , unix-system servers. thank in advance. hi, only portions. some regions of virtual memory in kernel mode such paged pool can paged , out of system, while some, such nonpaged pool, are guaranteed reside in physical memory @ times. thanks. this posting provided "as is" no warranties, , confers no rights. please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread. Windows Server  >  Windows Server General Forum ...

unattend.xml <WillWipeDisk>true</WillWipeDisk> fails to clean drive for gpt partitions

i'm getting windows can not installed disk. selected disk gpt partition style.  on every brand new dell r610 (with perc sas raid) have.  same error in bios/efi , efi mode.  if use diskpart manually clean, can install.  bug.  please don't refer me reading, have done that.  problem documented, manual solution isn't fix.  efi servers new standard, need fixed.  unacceptable.  technet: microsoft recommends use windows setup install uefi-based computers. process simpler , less prone errors. my autounattend.xml: <?xml version="1.0" encoding="utf-8"?> <unattend xmlns="urn:schemas-microsoft-com:unattend">     <settings pass="generalize">         <component name="microsoft-windows-servermanager-svrmgrnc" processorarchitecture="amd64" publickeytoken="31bf3856ad364e35" language="neutral" ve...

Prompt user for input when rdp with same user as logged in

what trying achieve: user dragos logged in on domain computer. when connect rdp username dragos on computer want user dragos asked if allows connection or not not taken over. when connect different user being asked, not when connecting same user logged in. searching solutions found this: administrative templates\windows components\remote desktop services\remote desktop session host\connections\set rules remote control of remote desktop services user sessions , give full control user permission. but not work expecting. is there solution logged in user promped if connecting same user name ? thank you hi, user dragos logged in on domain computer. when connect rdp username dragos on computer want user dragos asked if allows connection or not not taken over. as far know, there no built-in method achieve this. you may try search whether there third-party tools can achieve this, or write script. if need assistance scripting, here scripting forum links below you: ...

Small Business Server CALs disappearing due to hardware change - SBCore Event ID 1024

our sbs server had 5 5-pack basic cals installed support total of 30 users. operating fine several weeks after recent reinstall of sbs server. morning, cals removed sbcore service, logged event id 1024 saying hardware change has violated license agreement , cals must transferred. problem is, we've made no hardware changes. in fact, server has been online 2 weeks since last reboot no issues until today. can provide insight? maybe way tell hardware sbcore service thinks changed? hi,   as issue related sbs, suggest discussing in our sbs newsgroup. best resource troubleshoot issue.   http://www.microsoft.com/smallbusiness/community/newsgroups/dgbrowser/default.mspx?dg=microsoft.public.backoffice.smallbiz&amp;lang=en&amp;cr=us&amp;r=627fae54-a95e-45ba-b054-e423964b47fa   tim quan - msft   Windows Server  >  ...

ASSIGN AN HTML BLOCK TO A VARIABLE

when try save block on variable ise give me error. so question is, how can save block variable or array o whatelse in order call when start convertto-html command ? # block want sava on $head variable  $head =  "<script type="text/javascript"> $(document).ready(function(){ $('table tr td').each(function(){ var text=$(this).html(); if(text.localecompare('warning')==1){ $(this).parent().css('background-color','#ffff00'); } }); }); </script>"  $objs | sort-object esito | convertto-html -cssuri "c:\css.css" -property nome,stato,esito,ultimo_avvio,prossimo_avvio,abilitato -head $head -body $body  | out-file c:\a.html $head = @' <script type="text/javascript"> $(document).ready(function(){ $('table tr td').each(function(){ var text=$(this).html(); if(text.localecompare('warning')==1){ $(this).parent().css('background-color','#...

Inter domain migration + merging users ?

hello i have perform ad migration external domain (that call old domain) current domain used company (new domain). i read lot of things inter domain migration, know in case if can merge users accounts. to explain quickly, users have account in old domain, have account in new domain, provide them mails, skype, o365 ...  currently, open windows session john@old.domain, , open outlook john@new.domain would possible merge accounts ? ideal situation users logon account john@new.domain (with profile translation should retrieve old profile new account), able access local ressource thay had access old account. idea merge account john@old.domain sid history following on account john@new.domain thanks ! regards, thomas i should be. don't see issues migration + merging.  santhosh sivarajan | houston, tx | www.sivarajan.com itil,mcitp,mcts,mcse (w2k3/w2k/nt4),mcsa(w2k3/w2k/msg),network+,ccna my books: | windows server security | windows server ...

Deny "Apply" right not denying computer config settings

i setting group policy apply pair of windows 2003 terminal servers on server 2008 domain.  the 2 servers in own ou, "terminal servers", , in own security group, called "terminal servers".  i have few policies on domain: default domain, default domain controller, , policy "ts policy".  the policy applied terminal servers security group domain users, authenticated users, plus system , enterprise domain controllers have rights on this. the policy works ok, has user group policy loopback mode set replace, , setting roaming profile on file server redirecting folders separate root folder on same file server.  that seems work although haven't gone through enough testing take live yet. i keep these applying administrator account.  i have set "apply group policy" right "deny" administrator.   however, in practice policy still applying partially.  i confirmed using group policy modeling: user config portion of policy (redirected folder...

Unable to install “Microsoft .NET Framework 3.5” on Windows Server 2012,

Image
unable install “microsoft .net framework 3.5” on windows server 2012,   i wanted install install “microsoft .net framework 3.5” on windows server 2012 got attached error     what might issue here?   thank you   best   jamal check if have problem installing .net 3.5: http://blogs.msdn.com/b/sql_shep/archive/2012/08/01/windows-2012-and-net-3-5-feature-install.aspx Windows Server  >  Windows Server 2012 General

Cannot delete storage pool

i have done clean install of wss 2012r2 onto ssd , applied updates. i've installed raid server , server manager reports non-primordial unhealthy/unknown storage space made of virtual , physical disks. i cannot delete physical disks since says there virtual disk friendly name of "storage space" detached.  i cannot delete virtual disk says config read (and trying attach new server fails). i've tried using powershell reset status with: get-storagepool -friendlyname "storage*" | set-storagepool -isreadonly $false but gives me access denied error. the virtual disk says in mirror layout thin provisioning, in case that's relevant.  i don't care data on raid. any suggestions? i'm idiot.  i wasn't running powershell elevated status. Windows Server  >  ...

Unable to delegate CONTROL permissions to hidden attribute (server 2003)

Image
hello i following https://support.microsoft.com/en-us/kb/922836 i trying delegate control permissions; below how let non-administrative users see attribute data note following procedures   require   use ldp.exe tool included windows server 2003 r2 active   directory application mode (adam). other versions of ldp.exe tool cannot   set permissions. how manually set control_access permissions on user account open ldp.exe tool included windows server 2003 r2 adam. connect , bind directory. select user account, right-click account, click advanced , click security descriptor , , click ok . in dacl box, click add ace . in trustee box, type group name or user name want grant permissions. in control access box, verify changes made in step 5. i have tried using version of ldp installed server 2003 r2; , have downloaded , installed adam https://www.microsoft.com/en-us/download/confirmation.aspx?id=4201 this version of ldp appears same version using (versio...

Windows Longhorn Server Build 5728 ?

hello, my question : find windows longhorn server build 5728  please ? i've read was necessary to become beta tester download ? ok how precisely ? thanks for help. best regards. valorisa hi, thank inquiry @ time not adding new longhorn participants.  future additions come internally-sponsored ms staff (i.e. there no broad open enrollment). best regards, katherine   Windows Server  >  Windows Server General Forum

Scheduling multiple backups to network share using task scheduler

hi, i need schedule multiple backups of our server onto network share.   as far can see, backup scheduler cannot used this. since backup network share going overwrite earlier backup, asked management schedule backups based on days of week. means i'll backing 1 shared location on sunday, shared location on monday etc. i have tried using wbadmin in tandem taskscheduler this, not work. when setup task, says task has started, when check find no backup has happened. @ wits end now!   any suggestions please?   hi, i mentioned ntbackup because cannot confirm exact system version. ntbackup exists on windows 2003 , earlier versions. please refer to: http://technet.microsoft.com/en-us/library/cc742083(ws.10).aspx please check if user account , password added in command: -user  if backup saved remote shared folder, specifies user name write permission folder.   -password  specifies password user name provided parameter -user. ...

Unable to Access a particular server with FQDN from single server

need below scenario. server 1 abcd.fqdn.com server 2 efgh.fqdn.com server 1 able access server 2 name "efgh" , ip not with efgh.fqdn.com. server 2 accessible other servers in network through fqdn , netbios name. nslookup resolving server 2 fqdn. server 1. kindly me resolve same server os : window 2012 r2 ( both) steps tried 1. disjoin , rejoin server domain. 2. host entry  hi sahas, can please provide output following 2 commands run on abcd.fqdn.com? ipconfig /all nslookup -debug efgh.fqdn.com cheers, lain Windows Server  >  File Services and Storage

MDT 2010 hangs on uefi equipped machines

hi all, i'm new mdt (started playing betas earlier year), i've been using wds year or so.  have mdt 2010 server running on windows 2003 box of latest service packs, fix packs, etc. mdt server has been configured deploy our install images our test lab (we run 2003 r2 2008 r2). far mdt server (i upgraded betas rtm code) has been running great on of our machines, exception of our uefi based machines. we ibm lab (we have smattering of dell , hp boxes, none yet have uefi bios). have xseries , bladecenter products. our scenario: we're running mdt 2010 in lti setup. no database, want end user able pxe boot box, boot lite touch 32 or 64 bit wim and mdt screen allows them pick operating system want installed. let install start in winpe mode , winpe mode reboots , continues on installation path (dos boot mode 2003 r2 installs , 2008 gui setup, etc) that part works fine of our regular xseries (ie non uefi) blades , servers. user picks os, preinstall phase starts, finishes , reboots ...

Group Policy not Working Correctly After Restore from Backup (Server 2012r2)

hi, i restored active directory backup of server 2012r2 using veeam restore deleted organisational unit folder , each time did backup restore previous day or days before that, folder kept disappearing again. suspected folder vanished because there ad replication on server changing how removed ad role on second server , attempted restore backup again. there 1 ad , no replication server. has brought deleted folder great there problem group policy, when go open group policy management, says "the system cannot find path specified" still opens up, however, things not working correctly. if navigate sysvol folder on current working ad, folder: ntfrs_preexisting___see_eventlog i saw below in thread somewhere else want opinions if correct way things? the fix microsoft support copy 2 folders (policies/scripts) c:\windows\ sysvol \ sysvol \domain.local\n tfrs_preex isting___s ee_eventlo g c:\windows\ sysvol \ sysvol \domain.local\ folder, stop ntfrs service, ...

Script Join Computers to Domain

Image
hi here environment! 150 pc's, one widnows 2008 domain controller, single forest,single domain structure,   i have created domain windows 2008 "wintest.com".i want add 150 workstation remote using script. pls advise script same.   regards crew.       with regards crew, you can use netdom in  a  batch file. - http://portal.sivarajan.com/2010/04/add-workstation-to-domain-batch-file.html   for /f %%i in (c:\computers.txt) ( netdom join /d:infralab.local %%i /ou:ou=test,dc=infralab,dc=local )   santhosh sivarajan | mcts, mcse (w2k3/w2k/nt4), mcsa (w2k3/w2k/msg), ccna, network+| houston, tx blogs - http://blogs.sivarajan.com/ posting provided no warranties,and confers no rights. Windows Server  >  ...

Question on 2008 r2 remote desktop licensing manger reporting

if network has mixed terminal servers in network (2k8 , 2k3).  if point 2k3 ts server 2k8 rds license manager.  2k3 sessions show in 2k8 license usage reports @ all? or 2k3 user or 2k8 user? the 2k8 r2 rds lic manager has 2k8 rds cals , referring if downgrade or make them backwards compatible show gave 2k3 server/user? no 2k3 ts cals on 2k8 ts lic manager. hi,     based on inquiry, have made test on windows server 2008 license manager. the result that can choose connect , specify server name or ip address connect licenser server including windows server 2003 , 2008. working on other way .   meanwhile, if want install windows server 2008 cal on windows server 2003 support windows server 2003 terminal services, need call microsoft clearing house downgrade it.   windows server downgrade http://www.microsoft.com/windowsserver2008/en/us/downgrade-rights.aspx   how locate telephone number microsoft clearinghouse http://supp...

Powershell to get local users password age

hi all, i have managed find script pull out various info local users including password ages. my plan email local accounts tell them there password expire. im not best when comes powershell bare me :) need guide me in right direction. want list local users have password age on 85 days , go on email them please help! see below script have: param ( [parameter(position=0,mandatory=$false)] [validatenotnullorempty()] [alias('cn')][string[]]$computername=$env:computername, [parameter(position=1,mandatory=$false)] [alias('un')][string[]]$accountname, [parameter(position=2,mandatory=$false)] [alias('cred')][system.management.automation.pscredential]$credential ) $obj = @() $now = get-date foreach($computer in $computername) { if($credential) { $alllocalaccounts = get-wmiobject -class win32_useraccount -namespace "root\cimv2" ` -filter "localaccount='$true'" -computername $computer -credential $credential -er...