Password

Find Password Expiration Dates

Get Everyone’s Expiration Date

This will filter for only enabled users and users that have a password that will expire.

Get-ADUser -filter {Enabled -eq $True -and PasswordNeverExpires -eq $False} –Properties "DisplayName", "msDS-UserPasswordExpiryTimeComputed","PasswordLastSet" | Select-Object -Property "Displayname","PasswordLastSet",@{Name="ExpiryDate";Expression={[datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed")}}

Get a Specific User’s Expiration Date

Update “Username” to the username of the person we want to check.

Get-ADUser -filter {SamAccountName -eq "Username"} –Properties "DisplayName", "msDS-UserPasswordExpiryTimeComputed","PasswordLastSet",Enabled,PasswordNeverExpires | Select-Object -Property "Displayname","PasswordLastSet",@{Name="ExpiryDate";Expression={[datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed")}},Enabled,PasswordNeverExpires
 

Update Password Last Set

This will update the password last set time and date to now.

This takes a CSV in this format:

UserPrincipalName
[email protected]
[email protected]

$Users = Import-Csv users.csv
 
foreach ($User in $Users) {
    $UserPrincipalName = $User.UserPrincipalName
    get-ADUser -filter 'UserPrincipalName -eq $UserPrincipalName' | Set-ADUser -Replace @{pwdLastSet=0}
    get-ADUser -filter 'UserPrincipalName -eq $UserPrincipalName' | Set-ADUser -Replace @{pwdLastSet=-1}
}