AD Query Attribute Names for Password Info

[Guest Close Guest]

I need to produce a report showing various account information including Account Options: User cannot change password and Password never expires. I was attempting to create an AD Query but an unable to find the attributes for these two fields. Can they be added in Other attributes? If so can you provide the names?

[Guest Close cmccullough]

Re: AD Query Attribute Names for Password Info

Password never expires is listed in useraccountcontrol (Account Flags) as NO_PWDEXP.

User cannot change password - I don't see a way to show this in Hyena's AD views because it is a user flag that doesn't appear to actually come from an AD field.

[kstanush Administrator Find all posts View Profile Close kstanush]

Re: AD Query Attribute Names for Password Info

The 'User Must Change Password At Next Logon' information comes from the pwdlastset attribute. A Zero in this field indicates a true setting. Search MIcrosoft.com for pwdlastset for more information.