Re: Password age on user accounts on local computers

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 04/20/05 

Date: Wed, 20 Apr 2005 11:14:09 -0400

I am sorry, I misread the question. I thought you wanted, for some odd reason
only my inner mind knows, the time an account was created not the password age
even though everything you have here is about password age. Oy. I need to retire.

I actually have a tool that will dump this info for you in a csv format, look at
userdump on www.joeware.net

http://www.joeware.net/win/free/tools/userdump.htm

In vbscript you will need to use the iadsuser interface to gather the info,
there should be a method called something like passwordlastchanged which you
will need to convert to password age. 

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
jacksneed2000@yahoo.com wrote:
> Can anyone tell me how to enumerate the password age of user accounts
> on local computers using vbscript or .net?  I've found many examples
> how to retrieve the password age of active directory user accounts, but
> nothing on local computer user accounts. Also, please note I cannot use
> 3rd party applications or executebles in my work place (government
> facility).  Thanks!
>

Relevant Pages

  • Re: Default Domain Policy - Password Chg 90 days
    ... There are certain accounts that have ... The default domain policy has maximum password age under computer ... user - it is NOT being done through local GPOs. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password Expiration Question
    ... Password Age policy setting is enabled or not. ... attribute up to the current date for all accounts. ... This gives you some control over which accounts expire when. ...
    (microsoft.public.windows.server.security)
  • AD 2003 password expiration/complexity question
    ... if my domain policy says maximum password age is zero days (passwords never ... expire) and i change it to an arbitrary number, say 10, and all accounts are ...
    (microsoft.public.windows.server.active_directory)
  • Re: Tracking Kerberos Tickets
    ... would be to retrieve account password age, ... computer accounts will have their passwords changed automatically every ...
    (microsoft.public.platformsdk.security)
  • Re: UserAccountControl Attribute
    ... specific user objects (enabled user accounts) that appear to be missing those ... How can I view the attributes of the user objects in question? ... foreach (string parameter in Parameters) ...
    (microsoft.public.win2000.active_directory)