Password change history

[bentley45]

I need to generate a list of the dates when a user account password was changed. I know it was 5 times in the life of the account, but I need to know when.
Are there any scripts or utilities to return this info?
Thanks!

 

[itsp1965]

I don't think password histories are maintained for a user object (as far as I know). Your best bet would have been to audit your account objects and then query your security event log for that particular user and the associated event log id

 

[markdmac]

Yes, you can query AD to get the last time a password was changed.

You must first bind to the user object. Here is a simple example.

Set objUser = GetObject _
    ("LDAP://CN=myerken,OU=management,DC=Fabrikam,DC=com")

dtmValue = objUser.PasswordLastChanged
WScript.Echo "Password last changed: " & dtmValue

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[bentley45]

Thanks Mark. What I actually need is the total password change history on the account. I know it has been changed 5 times in the life of the account, but I need to know the dates.

 

[markdmac]

Each time a password is changed the filed is updated. So that history is not recorded.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[markdmac]

Sorry that should be field not filed.