Information Technology Reference
In-Depth Information
FIGURE 5-29
The Domain Admins page of the Active Directory Administrative Center
Resultant password settings
You can view the results of fine-grained password policies by selecting the user in the
Active Directory Administrative Center and clicking View Resultant Password Settings,
or us the Get-ADUserResultantPasswordPolicy cmdlet. This cmdlet accepts a variety of
forms for the -Identity parameter, or you can use Get-ADUser and pipe the result to the
Get-ADUserResultantPasswordPolicy cmdlet:
Get-ADUser -Identity "Charlie" | Get-ADUserResultantPasswordPolicy
AppliesTo : {CN=Domain Admins,CN=Users,DC=TreyResearch,DC=net}
ComplexityEnabled : True
DistinguishedName : CN=Domain Admins Policy,CN=Password Settings Container,CN=
System,DC=TreyResearch,DC=net
LockoutDuration : 00:30:00
LockoutObservationWindow : 00:30:00
LockoutThreshold : 5
MaxPasswordAge : 42.00:00:00
MinPasswordAge : 1.00:00:00
MinPasswordLength : 10
Name : Domain Admins Policy
ObjectClass : msDS-PasswordSettings
ObjectGUID : 89a03866-756d-4bd1-9835-5553b6e221de
PasswordHistoryCount : 24
Precedence : 20
ReversibleEncryptionEnabled : False
