To find out the password expiration date for an Active Directory user you must first determine your domain’s password expiration policy and then when the password was last set.

Find your Domain Password Expiration Policy

import-module activedirectory  

Property MaxPasswordAge will tell you the default password expiration policy

Determine Date User Password Was Last Set

import-module activedirectory  
Get-ADUser <username> -properties passwordlastset, passwordneverexpires

The user’s password will expire the date the password was last set + the value of MaxPasswordAge

Last modified: January 12, 2015



Write a Reply or Comment

Your email address will not be published.

To create code blocks or other preformatted text, indent by four spaces:

    This will be displayed in a monospaced font. The first four 
    spaces will be stripped off, but all other whitespace
    will be preserved.
    Markdown is turned off in code blocks:
     [This is not a link](

To create not a block, but an inline code span, use backticks:

Here is some inline `code`.

For more help see

This site uses Akismet to reduce spam. Learn how your comment data is processed.