Previous versions of Active Directory allowed administrators to check if a user account had an expired password.This was done by installing a non-standard dll called acctinfo.dll which gave you an additional tab to display the required information.
Below: Server 2003 – Active Directory ‘Additional Account Info’ tab.
Unfortunately Server 2008 – Active Directory Services does not support acctinfo.dll, however there is another approach which Microsoft have developed to get this information – using the Active Directory Administrative Center.
The following steps demonstrate how to list user accounts with an expired password.
It assumes you have already installed the Remote Server Administration Tools (see: http://www.microsoft.com/download/en/details.aspx?id=7887) and have required access to your Active Directory environment.
How to find users with expired passwords
- Using the Start menu, open the Active Directory Administrative Center
- Click on the ‘Global Search’ menu
- Using the ‘Add criteria’ button, select ‘Users with disabled/enabled accounts’ and ‘Users with an expired password’
- Click ‘Add’
- Click on the ‘disabled’ link and select ‘enabled’
- Click on the ‘Search’ button
- The search results will list all active user accounts which have an expired password.
-
You can access additional information for each user account by doubling click on the listed name.
- The search results may contain several system/service user accounts (for example, mailbox accounts) – you may choose to disable these accounts or modify the search parameters to filter these out.
