My active directory contains users who have “password never expires” activated. It is necessary that I manage to locate all such users. Does anyone know of a command that I can use to locate the users on the server? I have only Windows Server 2008 servers.
Hi Sheena,
You can try to run a dsquery * command from the command line of your domain controller. Code you can use is dsquery * -filter "(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=65536))". This code will display the DN of all your users that have set the option for password not to expire.
You can also try to do a global search on your active directory to find these users. To do this, just go to Start > Administrative Tools > Active Directory Administrative Center > Global Search > You can then set some keywords to build your search. Further information and details can be found here https://technet.microsoft.com/en-us/library/dd560661(WS.10).aspx.
Aristono
It is possible to find users with “Password never expires” through the Active Directory Administrative Center. You can do so by going by clicking on Start> Administrative Tools>Active Directory Administrative Center or by typing dsac.exe into Start>Run dialogue box. The centre allows you to perform a query-building search using a filtering mechanism.
Click on Global search on the left pane of the window that opens up, select the Normal radio button on the main pane and select on “Add criteria” and select options for your search.” Check on the relevant checkboxes to add your criteria. There are various options available and you can select the format and the details you need for your results.
With the search query, you will be able to get a list of all users with “passwords that never expires.”
