domain controller windows 2008

Posted on 2013-10-08
Medium Priority
Last Modified: 2013-11-09
how can i see that user changed his password in windows 2008 (AD)domain controller?
Question by:apollo-13
LVL 30

Accepted Solution

Randy Downs earned 668 total points
ID: 39557824
Try this or audit password changes


powershell command

Get-ADUser -filter '*' -Server "yourservername" -Properties PasswordLastSet,DisplayName | ft DisplayName,PasswordLastSet

You should get a nice table with what you're looking for. I've attached a sample.

You probably won't get one past the most recent. There's no variable in active directory for the history of times the password was set

LVL 36

Assisted Solution

by:Seth Simmons
Seth Simmons earned 668 total points
ID: 39559207
you could also open the user properties in ADUC, click the attribute editor tab and scroll to the pwdLastSet property and will show the last time the password was changed
LVL 24

Assisted Solution

Sandeshdubey earned 664 total points
ID: 39560509

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
Native ability to set a user account password via AD GPO was removed because the passwords can be easily decrypted by any authenticated user in the domain. Microsoft recommends LAPS as a replacement and I have written an article that does something …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

607 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question