Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » pwdlastset View in AD
pwdlastset View in AD [message #395175] Fri, 19 February 2010 09:34 Go to next message
gryphonfoo  is currently offline gryphonfoo
Messages: 8
Registered: June 2009
Junior Member
We changed our passwords every 90 days. Users love to call us and tell us
that they cannot log in. We look in AD at their Account Properties and it is
not locked out. We run a script and find that their password has not changed
for over 90 days. However, Help Desk can not run the script to see this date.
(obviously Help desk would not run a script.)
Is their any way to view Password Last Changes or Password Expire in the AD
Proerties of the account much like we see the other attributes like Account
lock out, Address, Profile...etc.. We have 2003 AD Native
Re: pwdlastset View in AD [message #395872 is a reply to message #395175] Sat, 20 February 2010 03:43 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello poboy_n.o_style,

Install and use acctinfo.dll on the machines:
http://mcpmag.com/articles/2005/08/08/windows-2003-mind-your -users.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> We changed our passwords every 90 days. Users love to call us and tell
> us that they cannot log in. We look in AD at their Account Properties
> and it is not locked out. We run a script and find that their password
> has not changed for over 90 days. However, Help Desk can not run the
> script to see this date. (obviously Help desk would not run a script.)
> Is their any way to view Password Last Changes or Password Expire in
> the AD Proerties of the account much like we see the other attributes
> like Account lock out, Address, Profile...etc.. We have 2003 AD Native
>
Re: pwdlastset View in AD [message #397215 is a reply to message #395872] Mon, 22 February 2010 08:37 Go to previous message
gryphonfoo  is currently offline gryphonfoo
Messages: 8
Registered: June 2009
Junior Member
Thanks. This worked but only up to a point. It did work when we drill down to
the Users OU and find the user but it does not show up when the Help desk
does a FIND Users.

"Meinolf Weber [MVP-DS]" wrote:

> Hello poboy_n.o_style,
>
> Install and use acctinfo.dll on the machines:
> http://mcpmag.com/articles/2005/08/08/windows-2003-mind-your -users.aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > We changed our passwords every 90 days. Users love to call us and tell
> > us that they cannot log in. We look in AD at their Account Properties
> > and it is not locked out. We run a script and find that their password
> > has not changed for over 90 days. However, Help Desk can not run the
> > script to see this date. (obviously Help desk would not run a script.)
> > Is their any way to view Password Last Changes or Password Expire in
> > the AD Proerties of the account much like we see the other attributes
> > like Account lock out, Address, Profile...etc.. We have 2003 AD Native
> >
>
>
> .
>
Previous Topic:AD CS PEM certificate
Next Topic:General Users Container Question
Goto Forum:
  


Current Time: Thu Jan 18 20:42:49 MST 2018

Total time taken to generate the page: 0.03289 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software