On Oct 13, 1:48*am, "IT Staff" <jkk...@xxxxxx> wrote:
Quote:
> Is there a way to determine the AD computer object password days ? Eg i wish
> to extract machines that password was not changed for more than 180 days,
> etc
>
> I think if computer is offline for *too long*, and if it is bring up to the
> domain again, the machine may need to rejoin domain.
>
> What functions are there in powershell to determine this ?
You can do it the same way you do with users. I usually check the
lastLogonTimeStamp property of its object in AD, which will be mostly
accurate (replicates slowly).
There's also an attribute called pwdLastSet for the date that the
password was last set. All computers are users, so the same
attributes apply when it comes to passwords.