Share via

does a user have a complex password?

Horst Graner | c-3 41 Reputation points
2020-11-07T15:45:36.23+00:00

Users should use complex passwords. This is specified by GPO. Is it possible to see if users already use a complex password?

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Client for IT Pros | User experience | Other
0 comments

Answer accepted by question author

  1. Thameur-BOURBITA 36,526 Reputation points Moderator
    2020-11-08T17:08:06.533+00:00

    Hi,

    If you the user has changed his password after the modification of password policy , he doesn't have to change it again because it alreday respect the password complexity applied by the password policy.
    You can know the date of last password change of the attribut Pwdlastset and the date.

    a-pwdlastset

    Please don't forget to mark this reply as answer if it help you to fix your issue

    0 comments

5 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2020-11-08T14:46:06.543+00:00

    point is that users may already have complex passwords

    There's no method for you to know this though. Complexity is checked at time of creation. There's no process to recheck them.

    --please don't forget to Accept as answer if the reply is helpful--

    1 person found this answer helpful.
    0 comments
  2. Horst Graner | c-3 41 Reputation points
    2020-11-08T14:44:22.393+00:00

    Thanks for the answers.
    However, the point is that users may already have complex passwords, and therefore should not be forced to change a password again if it is already complex.

    0 comments
  3. Thameur-BOURBITA 36,526 Reputation points Moderator
    2020-11-07T22:23:23.167+00:00

    Hi,

    Users should use complex passwords. This is specified by GPO. Is it possible to see if users already use a complex password?

    When you apply new policy , to be sure that all users are used a password with new policy , you have to force them to change the password at the next logon. 

    Set-ADUser -Identity $sAMAccountName -ChangePasswordAtLogon $True

    Please don't foget to mark this reply as answer if it help you to fix your issue

    0 comments
  4. Anonymous
    2020-11-07T20:16:56.84+00:00

    Simplest solution may be to force a password change after you modify the complexity.
    https://social.technet.microsoft.com/Forums/en-US/ab34cdf2-8038-4bd1-b876-39ee267e1475/powershell-script-to-force-a-list-of-active-directory-domain-user-to-change-password-at-next-logon?forum=winserverpowershell

    --please don't forget to Accept as answer if the reply is helpful--

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.