just analyse the pwLastSet attribute of the accounts - how about using the PW age policy to force user's to change the PW... (although this is always difficult for accounts that hardly logon interactively - i.e. remote users) - that's why we send out automated eMails to remind users of an upcoming PW expiry
/Guido -----Original Message----- From: Pennell, Ronald B. [mailto:[EMAIL PROTECTED] Sent: Donnerstag, 8. Januar 2004 20:00 To: [EMAIL PROTECTED] Subject: [ActiveDir] Listing passwd information from AD Does anyone have a quick and easy script that will scan the user acounts to see if the users haven't changed thir passwords in so many days? Also, a way to force those users passwords to change without having to touch each users acct. Running W2K SP3 Ron Pennell List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
