Home/ Questions/Q 820889
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-15T02:33:02+00:00

I want to expire users’ passwords on an individual basis in Microsoft Active directory

  • 0

I want to expire users’ passwords on an individual basis in Microsoft Active directory at different times.

I understand that each user within AD does not have it’s own password expry time. Instead there is a Maximum Password Age associated with the domain, and a LastPasswordSet date associated with the user.

I intend to set the LastPasswordSet to simulate the behavior of each user having an individual max password age.

In order to do this, I need to know the Maximum Password Age associated with the domain. How to I determine this programmatically from .NET?

Edit: I see that LastPasswordSet is readonly, so my approach may have no merit.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    If you use ADSI it’s the property maxPwdAge. Here’s an article that includes a sample of getting this out:

    http://msdn.microsoft.com/en-us/library/ms974598.aspx

    • 0