Adding a AD account which is set up for automatic resets

[support]

This post describes how to set up an Active Directory account in Passwordstate, configured for Automatic Resets:

 

Powershell Script:

 

$PasswordstateAPIURL = "https://fabrikam.com/api/passwords"
    
    $jsonString = '
{
    "PasswordListID":"9914",
    "Title":"SCCM Service Account",
    "Username":"sccm_admin",
    "GeneratePassword":"False",
    "Password":"Welcome01",
    "APIKey":"63fca2537db89e4fb329546d7e83cab6",
    "ValidatewithPrivAccount":"False",
    "AllowExport":"True",
    "PasswordResetEnabled":"True",
    "EnablePasswordResetSchedule":"True",
    "PasswordResetSchedule":"23:00",
    "AccountTypeID":"82",
    "ADDomainNetBIOS":"fabrikam",
    "PrivilegedAccountID":"2",
    "HeartbeatEnabled":"True",
    "ValidationScriptID":"9",
    "HeartbeatSchedule":"10:00"    
}
'
Invoke-Restmethod -Method POST -Uri $PasswordstateAPIURL -ContentType "application/json" -Body $jsonString

 

 

Pre-Requisites to get this script working:

 

An API key needs to be set on a Password List.  This can be achieved when adding or editing a Password List:

 

You'll need to find the PasswordListID value, by toggling the Visibility of the Web API IDs:

 

Next you'll need to find the AccountTypeID for Active Directory under Administration -> Images and Account Types:

 

 

Next find the Validation ScriptID for Active Directory Accounts under Administration -> Powershell Scripts -> Password Validation:

 

And the ID of your Privileged account, which has permissions in AD to reset Accounts:

 

 

If you insert these values into your script, along with any other string values like the Title or username, it will add a record in to the system as expected.