Here’s another very useful script which simply lists all of your users in Active Directory, sorted by when their passwords were last changed.
Great for checking if your password policies are actually being enforced…
Import-Module ActiveDirectory #This may be done automatically when issuing the next line
Get-ADUser –Filter * -Properties PasswordLastSet, PasswordNeverExpires | Sort PasswordLastSet | FT Name, PasswordLastSet, PasswordNeverExpires
And that will give you something like this:
You can export to a CSV should you have many users to look through:
…. | Export-CSV –Path PasswordResets.csv #to insert instead of “FT Name…”