AD Ldap pwdLastSet不能更新到指定日期

由于网上资料实在有限，特此记录

The only values that can be set are:

• 0 - To set "User Must Change Password at Next Logon", set the pwdLastSet attribute to zero (0). This is as if the Pwd-Last-Set attribute=True - which is an implementation of Password MUST Change condition.
• -1 - setting the Pwd-Last-Set attribute attribute to -1 which will effectively set the Pwd-Last-Set attribute to the current time and remove the "User Must Change Password at Next Logon" restriction.
• The Pwd-Last-Set attribute attribute cannot be set to any other values except by the system.

原文地址：Ldapwiki: Pwd-Last-Set attribute

用代码试了，可以修改为0 表示下次登录必须修改密码。

但是不能修改为具体的某一个日期。

修改密码后系统会自动更新该值。