• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 31
  • Last Modified:

active directory

How to check Maximum machine account password age"  in AD.
0
pramod1
Asked:
pramod1
  • 4
  • 3
  • 3
1 Solution
 
Tom CieslikIT EngineerCommented:
Are you talking about how to check setting in Group Policy for password age ?
0
 
pramod1Author Commented:
I NEED TO find machine configured in our domain what is the Maximum machine account password age

is there anything I need to check in group policy

can u please guide where to look exactly
0
 
efrimpolCommented:
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
Tom CieslikIT EngineerCommented:
I'm not sure what you want to do, but I assume you want to check account/computer with oldest password and compare it to policy so you'll know oldest password in your network.

To do this you must use Visual Basic and run script.
There is a predefined script for this and you can just copy it and run on your network

https://gallery.technet.microsoft.com/scriptcenter/dd8b4eb5-0c7b-45b4-be32-bb28e8b98685
0
 
Tom CieslikIT EngineerCommented:
Also you can try to find a user/account with expiring password but you must know user name


Search-ADUserWithExpiringPasswords
https://gallery.technet.microsoft.com/scriptcenter/8b1a5aff-1d95-445b-8b2d-721d0c6c5f03
0
 
pramod1Author Commented:
where can I see this :Maximum machine account password age in AD under computer configuration
0
 
efrimpolCommented:
On domain server, Group Policy Management: Edit Default Domain Policy (see attached screenshot)
2018-05-07_160855.jpg
0
 
pramod1Author Commented:
thanks this means the machine account password age which is meant to be 30 days will expire and not the user name??

machine account here refers to workstations and computer s, because we have a storage filer whose account got expired

does this mean the new password which we have set now will expire in 30 days for this account ?
0
 
efrimpolCommented:
Look at the article below - it predates Windows 2003, but essentially explains in details your questions concerning Machine Account Passwords Process:

https://blogs.technet.microsoft.com/askds/2009/02/15/machine-account-password-process-2/
0
 
pramod1Author Commented:
I HAVE JST POSTED A QUESTION relating to what you have been telling about machine account password age

it relates to this question only
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: MCSA MCSE Windows Server 2012

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

  • 4
  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now