Password Policy

Question

We recently deployed a fine grain password policy to our test users. Is there a way to find out via powershell which users does not meet the newly fine grain password policy?

Answer 1

In powershell you can list user attribute for last password change if you set a password policy on the password age, but you can't list the password complexity, so it depend on your password policy.

Answer 2

Hi @HC812003

The Get-ADDefaultDomainPasswordPolicy cmdlet gets the default password policy for a domain.

Get-ADDefaultDomainPasswordPolicy -Current LoggedOnUser

You can then compare them with the requirements for the fine grain policy.

The Get-ADFineGrainedPasswordPolicy cmdlet gets a fine-grained password policy or performs a search to retrieve multiple fine-grained password policies.

https://learn.microsoft.com/en-us/powershell/module/activedirectory/get-adfinegrainedpasswordpolicy?view=windowsserver2022-ps#:~:text=The%20Get%2DADFineGrainedPasswordPolicy%20cmdlet%20gets,grained%20password%20policy%20to%20get.

--
--If the reply is helpful, please Upvote and Accept it as an answer--