This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
networking:windows:active_directory:ad_password_policy [2020/09/25 09:35] gcooper |
networking:windows:active_directory:ad_password_policy [2020/09/28 10:51] (current) gcooper |
||
---|---|---|---|
Line 1: | Line 1: | ||
====== Active Directory Password Policy ====== | ====== Active Directory Password Policy ====== | ||
+ | |||
+ | ===== Check a User's Password and Policy ===== | ||
+ | |||
+ | Check when a user password expires: | ||
+ | |||
+ | < | ||
+ | net user USERNAME /domain | ||
+ | |||
+ | Get-ADUserResultantPasswordPolicy USERNAME | ||
+ | </ | ||
===== Default Domain Password Policy ===== | ===== Default Domain Password Policy ===== | ||
< | < | ||
- | get-addomain | get-adobject -properties * | select *pwd* | + | Get-ADDefaultDomainPasswordPolicy |
</ | </ | ||
Line 10: | Line 20: | ||
===== Fine-Grained Password Policy ===== | ===== Fine-Grained Password Policy ===== | ||
+ | |||
+ | https:// | ||
http:// | http:// | ||
Line 19: | Line 31: | ||
==== Show Fine-Grained Password Policies ==== | ==== Show Fine-Grained Password Policies ==== | ||
- | In PowerShell, load this function: | + | < |
+ | Get-ADFineGrainedPasswordPolicy -Filter * | ||
+ | </ | ||
+ | |||
+ | ==== Show Per User Policy ==== | ||
+ | |||
+ | < | ||
+ | Get-ADUserResultantPasswordPolicy username | ||
+ | </ | ||
+ | |||
+ | Or to show all users: | ||
< | < |