June 11, 2015

When was the Last Password Change

It can be handy to be able to look up when a User / System Account last changed password – this can be done using DSQuery

dsquery * “CN=<User name>,OU=<name of OU>,DC=<domain>,DC=<com> -Attr PwdLastSet

this will generate a long number which with the help of w32tm.exe can be converted to a date:

w32tm.exe /ntte <number generated above>

2015-06-11_09-41-51

June 11, 2015 by Mikael Blomqvist Active Directory 0