pwdlastset View in AD

We changed our passwords every 90 days. Users love to call us and tell us
that they cannot log in. We look in AD at their Account Properties and it is
not locked out. We run a script and find that their password has not changed
for over 90 days. However, Help Desk can not run the script to see this date.
(obviously Help desk would not run a script.)
Is their any way to view Password Last Changes or Password Expire in the AD
Proerties of the account much like we see the other attributes like Account
lock out, Address, Profile...etc.. We have 2003 AD Native

Hello poboy_n.o_style,

Install and use acctinfo.dll on the machines:
http://mcpmag.com/articles/2005/08/0...our-users.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> We changed our passwords every 90 days. Users love to call us and tell
> us that they cannot log in. We look in AD at their Account Properties
> and it is not locked out. We run a script and find that their password
> has not changed for over 90 days. However, Help Desk can not run the
> script to see this date. (obviously Help desk would not run a script.)
> Is their any way to view Password Last Changes or Password Expire in
> the AD Proerties of the account much like we see the other attributes
> like Account lock out, Address, Profile...etc.. We have 2003 AD Native
>

Thanks. This worked but only up to a point. It did work when we drill down to
the Users OU and find the user but it does not show up when the Help desk
does a FIND Users.

"Meinolf Weber [MVP-DS]" wrote:

> Hello poboy_n.o_style,
>
> Install and use acctinfo.dll on the machines:
> http://mcpmag.com/articles/2005/08/0...our-users.aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > We changed our passwords every 90 days. Users love to call us and tell
> > us that they cannot log in. We look in AD at their Account Properties
> > and it is not locked out. We run a script and find that their password
> > has not changed for over 90 days. However, Help Desk can not run the
> > script to see this date. (obviously Help desk would not run a script.)
> > Is their any way to view Password Last Changes or Password Expire in
> > the AD Proerties of the account much like we see the other attributes
> > like Account lock out, Address, Profile...etc.. We have 2003 AD Native
> >
>
>
> .
>