Solved

Password aging reports for Active Directory

Posted on 2011-03-01
4
1,432 Views
Last Modified: 2012-05-11
I have Windows 2003 domain (perhaps will be 2008 domian in the coming year) and I want to know what people use for password management.  My biggest need right now is being able to run a report on all users in AD to show me when they last changed their password, and how long before it expires.  Any other features are a plus, but password aging reports is the big one.
0
Comment
Question by:Ad-Apex
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 39

Accepted Solution

by:
Krzysztof Pytko earned 125 total points
ID: 35007675
You can use for that Microsoft DS Tools,
ADFind from
http://www.joeware.net/freetools/tools/adfind/index.htm
or
Quest PowerShell cmd-lets
http://www.quest.com/powershell/activeroles-server.aspx
or if it's 2008 R2
native PowerShell commands

Regards,
Krzysztof
0
 
LVL 27

Assisted Solution

by:KenMcF
KenMcF earned 125 total points
ID: 35007712
I agree with iSiek. The quest AD cmdlets are a great tool. You can use something like this to get a report for user passwords

get-qaduser -sizelimit 0 | Select Name, PasswordLastset, PasswordAge, PasswordExpires | Export-csv c:\userspasswords.csv
0
 
LVL 12

Expert Comment

by:FarWest
ID: 35007975
0
 

Author Closing Comment

by:Ad-Apex
ID: 35009782
Thanks!  I used the Quest cmdlets link from iSiek along with the command from KenMcF.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question