Solved

Password aging reports for Active Directory

Posted on 2011-03-01
4
1,417 Views
Last Modified: 2012-05-11
I have Windows 2003 domain (perhaps will be 2008 domian in the coming year) and I want to know what people use for password management.  My biggest need right now is being able to run a report on all users in AD to show me when they last changed their password, and how long before it expires.  Any other features are a plus, but password aging reports is the big one.
0
Comment
Question by:Ad-Apex
4 Comments
 
LVL 39

Accepted Solution

by:
Krzysztof Pytko earned 125 total points
ID: 35007675
You can use for that Microsoft DS Tools,
ADFind from
http://www.joeware.net/freetools/tools/adfind/index.htm
or
Quest PowerShell cmd-lets
http://www.quest.com/powershell/activeroles-server.aspx
or if it's 2008 R2
native PowerShell commands

Regards,
Krzysztof
0
 
LVL 27

Assisted Solution

by:KenMcF
KenMcF earned 125 total points
ID: 35007712
I agree with iSiek. The quest AD cmdlets are a great tool. You can use something like this to get a report for user passwords

get-qaduser -sizelimit 0 | Select Name, PasswordLastset, PasswordAge, PasswordExpires | Export-csv c:\userspasswords.csv
0
 
LVL 12

Expert Comment

by:FarWest
ID: 35007975
0
 

Author Closing Comment

by:Ad-Apex
ID: 35009782
Thanks!  I used the Quest cmdlets link from iSiek along with the command from KenMcF.
0

Featured Post

[Webinar] Disaster Recovery and Cloud Management

Learn from Unigma and CloudBerry industry veterans which providers are best for certain use cases and how to lower cloud costs, how to grow your Managed Services practice in IaaS clouds, and how to utilize public cloud for Disaster Recovery

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now