Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

How can I view when the password age is due on a Windows 2000 server domain?

Posted on 2004-03-26
15
Medium Priority
?
366 Views
Last Modified: 2010-04-11
Hello,

How can I view when the password age is due on a Windows 2000 server domain?  I made the change on 2/23/04 for the maximum password age to be 90 days.  Does that also take affect from that day?  So in May, users will be prompted to change their passwords.

Thanks in advance for your help.

0
Comment
Question by:g000se
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 8
  • 4
  • 3
15 Comments
 
LVL 67

Expert Comment

by:sirbounty
ID: 10691715
Click Start->Run->CMD <enter>

Type:

 NET ACCOUNTS <enter>
0
 
LVL 11

Author Comment

by:g000se
ID: 10704229
Thanks for the command line sirbounty.  I see the current setup but I would like to see the date for the expiration for the password.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 10704437
Hmmm - this is more easily accessible under 2003 with acctinfo: http://www.mail-archive.com/activedir@mail.activedir.org/msg12877.html

But with a little scripting, you can get similar info from AD in 2000:
http://support.microsoft.com/?kbid=323750
0
The Ideal Solution for Multi-Display Applications

Check out ATEN’s VS1912 12-Port DP Video Wall Media Player at InfoComm 2017. Kerri describes how easy it is to design creative video walls in asymmetric layouts and schedule detailed playlists ahead of time with its advanced scheduling feature.

 
LVL 11

Author Comment

by:g000se
ID: 10707765
So with  http://www.mail-archive.com/activedir@mail.activedir.org/msg12877.html---- it only works with the 2003 environment?

I am not familar with scripting.  I saw the link and there was codes.  Is there a place on the Gui interface where I can extract that information.

Thanks.
 
0
 
LVL 11

Author Comment

by:g000se
ID: 10708450
I had set the password age for 90 days on 2/23/04 and now I just got a 14 day password change warning.  How does that come into play.  It should be 90days from 2/23/04.  Am I missing something besides my two cents? ;)
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 10708743
That is odd.

Um, not at work now, so I can't view this 'live' - but I think if you open up the account and go to the Accounts tab, there's a shaded/disabled date at the bottom...I think it might be for account disablement, but it may correlate to that ending date...

Yes, ADSI scripting is not something to play around with if you've no prior experience...

Where do you have the password age applied?  I think it must be at the domain level and not for an OU.

Have you tried
 Start->Run->gpupdate /force
??
0
 
LVL 11

Author Comment

by:g000se
ID: 10709051
The password age is applied at the Domain level.  

Will the gpupdate /force provide me with the necessary information?



0
 
LVL 67

Expert Comment

by:sirbounty
ID: 10709112
No, it would apply the policy immediately.  If you've logged off and on again, that's not necessary...
0
 
LVL 85

Expert Comment

by:oBdA
ID: 10712857
When you set a "password expires" policy, the password change request will become active depending on the date the user's password was set the last time; that might be immediately after activating the policy, if the last password change dates back long enough.
To find out when a user changed his password the last time, open a command window and enter
net user "YourUserName" /domain
This will display some information about the account, including the date the password was last set. It will display the password expiration date as well.
0
 
LVL 11

Author Comment

by:g000se
ID: 10713984
Hello oBda,

I tried using the syntax but it doesn' t like it.  Please advise.  thanks.
0
 
LVL 11

Author Comment

by:g000se
ID: 10714002
Same message as before:  

"I had set the password age for 90 days on 2/23/04 and now I just got a 14 day password change warning.  How does that come into play.  It should be 90days from 2/23/04.  Am I missing something besides my two cents? ;)"

I am a bit confused, can someone clear the confusion?  It always fun learning new things at a rapid rate.  I should have been a race car driver ;)
0
 
LVL 85

Accepted Solution

by:
oBdA earned 750 total points
ID: 10714154
There is no general "password age" for a domain. The password expiration is user specific, and, as I said before, the password age will be calculated starting from the *user's* last password change. The date of your activation of the policy has not very much to do with the expiration date.
Example: Let's say you created a user JDoe 4 months ago, and he never changed his password. You implement a password policy today, with a maximum age of 3 months. As soon as JDoe logs on, he will be forced to change his password, because the password age is over the limit.
To view the last password change and the password expiration date of the user "JDoe", open a command window and enter
net user "JDoe" /domain
Replace "JDoe" with the username you want to query; leave "/domain" as is, this is *not* a placeholder for your actual domain name!
 
0
 
LVL 11

Author Comment

by:g000se
ID: 10714499
Thanks for the clarification.  I had placed the name of my company's domain for the word "domain" instead of using the word "domain"

What Microsoft article can I refer to for the password expiration for the example:  JDoe 4 months ago...?
0
 
LVL 85

Expert Comment

by:oBdA
ID: 10715300
Well, sorry to disappoint you, but I'm afraid the "John Doe" expiration is just my example ...
0
 
LVL 11

Author Comment

by:g000se
ID: 10718367
No that's kewl.  I just had to check because my manager would want to know.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Originally, this post was published on Monitis Blog, you can check it here . It goes without saying that technology has transformed society and the very nature of how we live, work, and communicate in ways that would’ve been incomprehensible 5 ye…
This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question