I am trying to get a report of what date / time users last changed their passwords. When I attempt to do this via VBScript using the PasswordLastChanged attribute in an LDAP object I get a response for every user object. When I attempt to do this is PowerShell using the Quest cmdlet "get-qaduser -sizelimit 0 | select ntaccountname,passwordlastset" I get results for the majority of systems, but a few hundred do not have anything is the passwordlastset attribute.
Can anyone fill me in on why? I would love to gather this info with the quest tool, so that I can include it in larger PowerShell scripts, but need complete information.