I need to clean up my domain from accounts that have older than 90 days password age. But i don't want to just change passwords without knowing where all these accounts reside on the domain and whether or not i may need to fat finger these accounts if required. In dire need of a solution. Scripting, command line or Power shell, I'm sure would do that trick. Thank you so much.