zm-oai 51c30ad800 Repair expired Windows sandbox account passwords during setup (#46043) ...

## Why

An ACL refresh cannot rotate expired sandbox account passwords or update stored credentials. Accounts marked with `UF_PASSWORD_EXPIRED` need full setup before logon.

## What changed

- Trigger full setup when either sandbox account has an expired password, then reload credentials and report an error if either password remains expired.
- Treat expired passwords as incomplete setup in service provisioning and reject them during registration-only refreshes.

## Testing

Add coverage for expiration on either account, a single repair attempt, credential reload, and unsuccessful repair. Add an ignored Windows test requiring administrator rights to verify that resetting an expired password preserves other account flags.

GitOrigin-RevId: cd6e86f226bea52243d37bd7c7becf7378ba8721

2026-09-16 22:26:17 +00:00

..

src

Repair expired Windows sandbox account passwords during setup (#46043)

2026-09-16 22:26:17 +00:00

BUILD.bazel

Add service-managed package registration for Windows sandbox accounts (#45542)

2026-09-14 23:24:10 +00:00

Cargo.toml

Complete Windows sandbox uninstall cleanup (#45799)

2026-09-15 21:33:16 +00:00