Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1457
  • Last Modified:

Password aging reports for Active Directory

I have Windows 2003 domain (perhaps will be 2008 domian in the coming year) and I want to know what people use for password management.  My biggest need right now is being able to run a report on all users in AD to show me when they last changed their password, and how long before it expires.  Any other features are a plus, but password aging reports is the big one.
0
Ad-Apex
Asked:
Ad-Apex
2 Solutions
 
Krzysztof PytkoActive Directory EngineerCommented:
You can use for that Microsoft DS Tools,
ADFind from
http://www.joeware.net/freetools/tools/adfind/index.htm
or
Quest PowerShell cmd-lets
http://www.quest.com/powershell/activeroles-server.aspx
or if it's 2008 R2
native PowerShell commands

Regards,
Krzysztof
0
 
KenMcFCommented:
I agree with iSiek. The quest AD cmdlets are a great tool. You can use something like this to get a report for user passwords

get-qaduser -sizelimit 0 | Select Name, PasswordLastset, PasswordAge, PasswordExpires | Export-csv c:\userspasswords.csv
0
 
FarWestCommented:
0
 
Ad-ApexAuthor Commented:
Thanks!  I used the Quest cmdlets link from iSiek along with the command from KenMcF.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now