| Author | Messages | |
mohanrav
Posts:82
 | | 09/02/2010 2:18 AM |
| Hi team,
I want to check what is the password expiry date for a group of users through a query. Can somone help?
Thanks in advance.
-- Regards, Mohan R Level2-Server support Engineer.
| | | |
| PARRIS
Posts:293
 | | 09/02/2010 6:33 AM |
| Mohan,
What have you tried so far?
Regards,
Mark
MVP-DS,MCT,MCITP:EA:SA,MCSE
t.01372 740373 m.07801 690596
linkedin http://uk.linkedin.com/in/markparris facebook http://facebook.com/markparris twitter http://twitter.com/markparris
-----Original Message----- From: Mohan Ravindran <mohan.activedirectorysupport@gmail.com> Sender: "activedir-owner@mail.activedir.org" <activedir-owner@mail.activedir.org> Date: Thu, 2 Sep 2010 02:16:33 To: activedir<ActiveDir@mail.activedir.org> Reply-To: "activedir@mail.activedir.org" <activedir@mail.activedir.org> Subject: [ActiveDir] Query to check the user's PWD Expiry
Hi team,
I want to check what is the password expiry date for a group of users through a query. Can somone help?
Thanks in advance.
-- Regards, Mohan R Level2-Server support Engineer.
______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________
| | | |
| listmail
Posts:824
 | | 09/02/2010 7:38 AM |
| AD doesn't store password expiration dates, it stores password change times. So you can't query anything to get the expiration date. You will need a script or some other tool that will perform multiple steps on your behalf:
1. Retrieve the password change time for the users in question
2. Retrieve what policy is in play for the users in question
a. Pre-W2K8 this will be simple, the domain policy, if FGPP this isn't as trivial
3. Generate the expiry date for every user based on the effective policies.
joe
--
O'Reilly Active Directory Fourth Edition - <http://www.joeware.net/win/ad4e.htm> http://www.joeware.net/win/ad4e.htm
Blog: <http://blog.joeware.net> http://blog.joeware.net
From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of Mohan Ravindran Sent: Wednesday, September 01, 2010 9:17 PM To: activedir Subject: [ActiveDir] Query to check the user's PWD Expiry
Hi team,
I want to check what is the password expiry date for a group of users through a query. Can somone help?
Thanks in advance.
-- Regards, Mohan R Level2-Server support Engineer.
| | | |
| art0514
Posts:3
 | | 09/02/2010 1:31 PM |
| http://blogs.msdn.com/b/adpowershell/archive/2010/02/26/find-out-when-your-password-expires.aspx
From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of Mohan Ravindran Sent: Wednesday, September 01, 2010 8:17 PM To: activedir Subject: [ActiveDir] Query to check the user's PWD Expiry
Hi team,
I want to check what is the password expiry date for a group of users through a query. Can somone help?
Thanks in advance.
-- Regards, Mohan R Level2-Server support Engineer.
________________________________ This e-mail message and any attached files transmitted with it, from Loomis Armored, Inc. is intended solely for the use of named recipient(s) to whom this e-mail message is addressed. It may be privileged and confidential, is provided without warranty, and does not offer to or create a contract or amendment to any existing contract. If you are not an intended recipient, you are notified that reviewing, disclosing, copying, distributing, or taking any action in reliance on the contents of this information is strictly prohibited. If you received this communication in error, please reply by e-mail and delete the original message. Thank you.
| | | |
| RickSheikh
Posts:373
 | | 09/02/2010 3:30 PM |
| Or you can use PowerShell with Quest AD Cmdlets with a simple oner-liner, that already does the figuring out part of last password changed against the applicable policy. You can also pass a list of users to the Get-QADUser cmdlet.
[PS] C:\PS>Get-QADUser rick.sheikh | select passwordstatus > > PasswordStatus > -------------- > Expires at: Saturday, September 04, 2010 >
On Thu, Sep 2, 2010 at 7:30 AM, Beane, Art <Art.Beane@us.loomis.com> wrote:
> > http://blogs.msdn.com/b/adpowershell/archive/2010/02/26/find-out-when-your-password-expires.aspx > > > > > > *From:* activedir-owner@mail.activedir.org [mailto: > activedir-owner@mail.activedir.org] *On Behalf Of *Mohan Ravindran > *Sent:* Wednesday, September 01, 2010 8:17 PM > *To:* activedir > *Subject:* [ActiveDir] Query to check the user's PWD Expiry > > > > Hi team, > > > > I want to check what is the password expiry date for a group of users > through a query. Can somone help? > > > > Thanks in advance. > > -- > Regards, > Mohan R > Level2-Server support Engineer. > > > ------------------------------ > This e-mail message and any attached files transmitted with it, from Loomis > Armored, Inc. is intended solely for the use of named recipient(s) to whom > this e-mail message is addressed. It may be privileged and confidential, is > provided without warranty, and does not offer to or create a contract or > amendment to any existing contract. If you are not an intended recipient, > you are notified that reviewing, disclosing, copying, distributing, or > taking any action in reliance on the contents of this information is > strictly prohibited. If you received this communication in error, please > reply by e-mail and delete the original message. Thank you. >
| | | |
|
|