PowerShell - Get-Localuser PasswordExpires

Question

PowerShell - Get-Localuser PasswordExpires

Sergio Siqueira 41

Hi Guys How do I check if the local user has "password expires" true or false? User's image

Thank you very much in advance

2 answers

Your answer

Answer 1

Shashank Kumar Srivastava 0 Student Ambassador

# Specify the username you want to check
$userName = "YourUsername"

# Get information about the local user
$user = Get-LocalUser -Name $userName

# Check the PasswordNeverExpires property
if ($user.PasswordNeverExpires) {
    Write-Host "$userName has 'Password never expires' set to true."
} else {
    Write-Host "$userName has 'Password never expires' set to false."
}

Replace "YourUsername" with the actual username you want to check. The PasswordNeverExpires property of the Get-LocalUser cmdlet will be True if the password never expires, and False otherwise. @Sergio Siqueira

AH 25 Reputation points

2024-08-29T21:41:41.66+00:00

There is no property PasswordNeverExpires when you get the object with Get-LocalUser

Answer 2

Castorix31 90,686

On Windows 10 22H2, this works for me :

Get-WmiObject -Class Win32_UserAccount -Filter "Name='your_username'" | Select-Object Name, PasswordExpires

Rich Matheisen 47,901 Reputation points

2024-09-12T19:29:44.0066667+00:00

(Get-LocalUser 'your_username').PasswordExpires will do the same thing.
Castorix31 90,686 Reputation points

2024-09-14T10:39:08.9133333+00:00

(Get-LocalUser 'your_username').PasswordExpires will do the same thing.

But as the OP said, it is also empty on my OS :
Castorix31 90,686 Reputation points

2024-09-14T11:08:46.7033333+00:00

Well, after more tests with different users, it seems that when it is empty, it means "false", otherwise I get an expiration date
Rich Matheisen 47,901 Reputation points

2024-09-14T15:05:22.9+00:00

If you mean its value is $null, then you're correct. It will be $null if the property has never been changed since the creation of the local user account.

FWIW, that property doesn't mean the password HAS expired, it just means the password CAN expire.

Password expiration is based whether or not the PasswordExpires property contains a $true value, and on either your machines' local security settings, or the default LanMan expiration period (30 days, if I recall correctly), and the value of the user accounts' PasswordLastSet property.

If you want to know the number of days before a password is subject to expiration (see PasswordExpires), you can find it pretty quickly by using the net accounts command.

Share via

PowerShell - Get-Localuser PasswordExpires

2 answers

Your answer