AD Query Attribute Names for Password Info

I need to produce a report showing various account information including Account Options: User cannot change password and Password never expires. I was attempting to create an AD Query but an unable to find the attributes for these two fields. Can they be added in Other attributes? If so can you provide the names?

[cmccullough]

Re: AD Query Attribute Names for Password Info

Password never expires is listed in useraccountcontrol (Account Flags) as NO_PWDEXP.

User cannot change password - I don't see a way to show this in Hyena's AD views because it is a user flag that doesn't appear to actually come from an AD field.

[kstanush]

Re: AD Query Attribute Names for Password Info

The 'User Must Change Password At Next Logon' information comes from the pwdlastset attribute. A Zero in this field indicates a true setting. Search MIcrosoft.com for pwdlastset for more information.