Co-Authored By:

Asked by: Lakendra Holanda
technology and computing shareware and freewareWhen was the last password changed for a user account in Active Directory?
You can check the Last Password Changed information for a user account in Active Directory. The information for last password changed is stored in an attribute called “PwdLastSet”. You can check the value of “PwdLastSet” using the Microsoft “ADSI Edit” tool.
Thereof, how do you find out who changed AD password?
- Step 1 -Run GPMC. msc → open "Default Domain Policy" → Computer Configuration → Policies → Windows Settings → Security Settings → Local Policies → Audit Policy:
- Step 2 - Run GPMC.
- Step 3 -Open Event viewer and search Security log for event id's:
Also question is, how can I tell when a password will expire in active directory?
NET USER Command to check password expire details
- Go to Start menu or to the Search bar.
- Type “CMD” or “Command Prompt” and press Enter to open Command Prompt window.
- At the Command Prompt window type the below listed command and press Enter to display the user account details.
Go to the Servers tab and select your server. The password will be displayed when you hover over 'show password' below the 'Login details server' heading.