2

how can I search for two or three months old passwords on a Windows domain controller?

I am an administrator on this domain.

splattne
  • 28,508
  • 20
  • 98
  • 148
kartook
  • 79
  • 1
  • 4
  • 8
  • 1
    Its difficult to determine what your after, are you looking to retrieve a list of users who's passwords will be expiring, or do you want to find out what a users password was 2-3 months ago? – Sam Cogan Jun 02 '09 at 12:10
  • i want to find out what a users password was 2-3 months ago? – kartook Jun 03 '09 at 10:16
  • You could accept the answer now. This way it's clear that it is the right answer to your question. Thank you! – splattne Aug 02 '09 at 14:42

4 Answers4

10

dsquery user -stalepwd 60

Returns a list of all users with a password age of 60 days or more.

Kara Marfia
  • 7,892
  • 5
  • 33
  • 57
3

have a look at this artice from the microsoft scripting guys

http://www.microsoft.com/technet/scriptcenter/resources/qanda/nov08/hey1118.mspx

JoeOD
  • 61
  • 6
0

I'm not exactly sure I understand what you're asking for. But take a look at dsquery.exe, which can retrieve many interesting things from an Active Directory.

0

The ActiveDirectory extension to PowerShell GUI will also provide an extensive list of fields when exporting to CSV a list of AD users including password expiration

Kevin Kuphal
  • 9,134
  • 1
  • 35
  • 41
  • Finally i am expert to generate the reports on AD now .thanks to everyone guys .really i was learned this from here all – kartook Jul 10 '09 at 11:15