AccountExpires = '30-Dec-1899 23:59:00'

Hi Sargay,

as a workaround I would propose to use the template version used until 9.1 " ....    Value = DateValue(CStr($FK(UID_Person).DateLastWorked:Date$)).Date.AddMinutes(1439)...". You should open a bug request at support in parallel.

regards,

   Tino

Hi, thank you for your answer.

Yes, we tried to use the previous version of the value template script.
And yes, it works correctly for empty values in Person.DateLastWorked.
But... It works incorrectly for non-empty values in in Person.DateLastWorked. When we trying to save newly generated value, 1IM 9.2 returns an exception (below):

- Error applying changes to database.
- Conversion of 09/01/2025 23:59:00 to SQL string of type Date failed.
- Local time values are not valid in the database. They have to be converted to UTC using DbVal.ToUniversalTime.

I think this KB Article describes your issue and the HF required. support.oneidentity.com/.../adsaccount-is-created-with-a-long-expired-expiry-date-if-the-associated-identity-has-no-last-working-date-set

As an temporal workaround we have implemented a conditional logic


-------------------------------

If ($FK(UID_Person).DateLastWorked:Date$.Year < 1900) Then
      Value = Nothing
Else
      'always end of the day 23:59
      Value = $FK(UID_Person).DateLastWorked:Date$.Date.AddMinutes(1439)
End If

--------------------------------