pramod1
asked on
active directory
How to check Maximum machine account password age" in AD.
Are you talking about how to check setting in Group Policy for password age ?
ASKER
I NEED TO find machine configured in our domain what is the Maximum machine account password age
is there anything I need to check in group policy
can u please guide where to look exactly
is there anything I need to check in group policy
can u please guide where to look exactly
This may help: Domain member: Maximum machine account password age
https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-maximum-machine-account-password-age
https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-member-maximum-machine-account-password-age
I'm not sure what you want to do, but I assume you want to check account/computer with oldest password and compare it to policy so you'll know oldest password in your network.
To do this you must use Visual Basic and run script.
There is a predefined script for this and you can just copy it and run on your network
https://gallery.technet.microsoft.com/scriptcenter/dd8b4eb5-0c7b-45b4-be32-bb28e8b98685
To do this you must use Visual Basic and run script.
There is a predefined script for this and you can just copy it and run on your network
https://gallery.technet.microsoft.com/scriptcenter/dd8b4eb5-0c7b-45b4-be32-bb28e8b98685
Also you can try to find a user/account with expiring password but you must know user name
Search-ADUserWithExpiringP asswords
https://gallery.technet.microsoft.com/scriptcenter/8b1a5aff-1d95-445b-8b2d-721d0c6c5f03
Search-ADUserWithExpiringP
https://gallery.technet.microsoft.com/scriptcenter/8b1a5aff-1d95-445b-8b2d-721d0c6c5f03
ASKER
where can I see this :Maximum machine account password age in AD under computer configuration
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
thanks this means the machine account password age which is meant to be 30 days will expire and not the user name??
machine account here refers to workstations and computer s, because we have a storage filer whose account got expired
does this mean the new password which we have set now will expire in 30 days for this account ?
machine account here refers to workstations and computer s, because we have a storage filer whose account got expired
does this mean the new password which we have set now will expire in 30 days for this account ?
Look at the article below - it predates Windows 2003, but essentially explains in details your questions concerning Machine Account Passwords Process:
https://blogs.technet.microsoft.com/askds/2009/02/15/machine-account-password-process-2/
https://blogs.technet.microsoft.com/askds/2009/02/15/machine-account-password-process-2/
ASKER
I HAVE JST POSTED A QUESTION relating to what you have been telling about machine account password age
it relates to this question only
it relates to this question only