KB192949 - How To Find Password Last Changed Date Using ADSI

Article ID: 192949

Article Last Modified on 9/28/2007

Microsoft Windows 95
Microsoft Windows NT Server 3.51
Microsoft Active Directory Service Interfaces 2.5

This article was previously published under Q192949

SUMMARY

The Active Directory Service Interfaces (ADSI) Windows NT provider does not support the PasswordLastChanged Property of an IADsUser object. You can computer this date by subtracting the password expiration period from the password expiration date to get the last change date. Note that for users whose passwords never expire, the PasswordExpirationDate will be in the past and the computation still works correctly.

MORE INFORMATION

The following Visual Basic code illustrates this:

Set adsUser = GetObject("WinNT://" & strDomain & "/" & strUser & _
       ",user")

   Debug.Print "Password Last Changed on : " & CStr( _
       DateAdd("s", -adsUser.Get("MaxPasswordAge"), _
           adsUser.PasswordExpirationDate))

REFERENCES

Active Directory Service Interfaces (ADSI) documentation is available in the Platform SDK section of MSDN and in a help file you can download from the following Web site:

http://msdn2.microsoft.com/library/aa772170.aspx

Keywords: kbapi kbhowto kbnetwork KB192949