It can be handy to be able to look up when a User / System Account last changed password – this can be done using DSQuery
dsquery * “CN=<User name>,OU=<name of OU>,DC=<domain>,DC=<com> -Attr PwdLastSet
this will generate a long number which with the help of w32tm.exe can be converted to a date:
w32tm.exe /ntte <number generated above>
Recent Comments