Security News > 2022 > May > Using PowerShell to manage password resets in Windows domains

Using PowerShell to manage password resets in Windows domains
2022-05-04 14:01

You can find the date of the user's most recent password change by examining the PwdLastSet attribute, shown in Figure 1.

Only one user's password change date is being shown, but there are any number of ways to tell the Get-ADUser cmdlet to display data for multiple user accounts.

Although PowerShell will allow you to perform these types of actions, they are more complex than simply retrieving the password change date alone.

All of this is to say that you can use PowerShell to figure out who has changed their password and who has not.

The real question however, is whether a password change is really worth the complexities involved in delving into PowerShell? This question seems especially relevant considering that CISA, Microsoft, and other cybersecurity experts now recommend against scheduled password changes.

The latest version of Specops Password Auditor contains a tool that admins can use to determine who has and who has not changed their password since a certain date.


News URL

https://www.bleepingcomputer.com/news/security/using-powershell-to-manage-password-resets-in-windows-domains/