I was wondering if the following account auditing points would be possible on Active Directory without using third party tools. I am also going through some scripting samples and it seems this will require in depth scripting knowledge or powershell. Is there any reference material on Active Directory account auditing that is based on some tangible security/audit standard? - Accounts with passwords that cannot be changed - Accounts that do not require passwords - Accounts that have never set the password - Accounts that have never logged on - Accounts with no logon script - Accounts on active directory have home drives or home directories - Accounts with no description/comment

You should be able to get all this information easily using Quest QADCmdlets... http://www.quest.com/powershell/activeroles-server.aspx

Hi Naraka, Please post your issue on the server forum, I am sorry that this forum is just for exchange related issue. Regards! Gavin TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.