Password times changed and it's log
I can get the last time password was changed "last password change" attribute, but I want is the history, for example the last five times user changed his password with it's dates.
June 16th, 2012 6:04am

Only the date of the last password change is saved in Active Directory. You would need to enable auditing of password change events, and then periodically scan the security event logs for the appropriate events. Per this article, the EventCode for attempted password changes is 4723: http://support.microsoft.com/kb/947226 Since only recent events are maintained in the logs (they overwrite themselves), you would need to constantly scan and retain the events you want. You might be able to use this script from the script gallery: http://gallery.technet.microsoft.com/709315b1-3417-4b77-8b1f-fa9fc0e10b0e Richard Mueller - MVP Directory Services
Free Windows Admin Tool Kit Click here and download it now
June 16th, 2012 1:54pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics