Computer Last Password Change

Hi

I have been asked is there a way of working out the date and time a computer
account has been active on a domain.

Basically we have a lot of hardware that is being upgraded and our support
staff do not always remove old accounts from AD.

From what I have been told, Computer Accounts have to authenticate
themselves with AD within a certain period and a password is changed at this
stage.

How can I query this?

Regards

D

Try oldcomp from joeware.net
(http://www.joeware.net/freetools/tools/oldcmp/index.htm). Alternatively,
you can also use dsquery computer command (with -stalepwd switch)...

hth
Marcin

"TheNugget2007" <> wrote in message
news:...
> Hi
>
> I have been asked is there a way of working out the date and time a
> computer account has been active on a domain.
>
> Basically we have a lot of hardware that is being upgraded and our support
> staff do not always remove old accounts from AD.
>
> From what I have been told, Computer Accounts have to authenticate
> themselves with AD within a certain period and a password is changed at
> this stage.
>
> How can I query this?
>
> Regards
>
> D

Joe Richards' oldcmp utility is the best tool. If you want a scripting
solution I have an example VBScript program that documents the date/time
when all users last changed their password linked here:

http://www.rlmueller.net/PwdLastChanged.htm

The program has the changes required to document computers rather than users
commented in the code.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

"Marcin" <> wrote in message
news:...
> Try oldcomp from joeware.net
> (http://www.joeware.net/freetools/tools/oldcmp/index.htm). Alternatively,
> you can also use dsquery computer command (with -stalepwd switch)...
>
> hth
> Marcin
>
> "TheNugget2007" <> wrote in message
> news:...
>> Hi
>>
>> I have been asked is there a way of working out the date and time a
>> computer account has been active on a domain.
>>
>> Basically we have a lot of hardware that is being upgraded and our
>> support staff do not always remove old accounts from AD.
>>
>> From what I have been told, Computer Accounts have to authenticate
>> themselves with AD within a certain period and a password is changed at
>> this stage.
>>
>> How can I query this?
>>
>> Regards
>>
>> D
>
>

Hello TheNugget2007,

As said from the others, oldcomp is a really good solution.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi
>
> I have been asked is there a way of working out the date and time a
> computer account has been active on a domain.
>
> Basically we have a lot of hardware that is being upgraded and our
> support staff do not always remove old accounts from AD.
>
> From what I have been told, Computer Accounts have to authenticate
> themselves with AD within a certain period and a password is changed
> at this stage.
>
> How can I query this?
>
> Regards
>
> D
>

If you just want to get a list of computers with their last password update
and user logon time stamps, and if you are into using Power Shell, you may
find the scripts available at
http://members.shaw.ca/bsanders/Wind...oryscripts.htm
useful.

--
Bruce Sanderson
http://members.shaw.ca/bsanders

It is perfectly useless to know the right answer to the wrong question.



"Marcin" <> wrote in message
news:...
> Try oldcomp from joeware.net
> (http://www.joeware.net/freetools/tools/oldcmp/index.htm). Alternatively,
> you can also use dsquery computer command (with -stalepwd switch)...
>
> hth
> Marcin
>
> "TheNugget2007" <> wrote in message
> news:...
>> Hi
>>
>> I have been asked is there a way of working out the date and time a
>> computer account has been active on a domain.
>>
>> Basically we have a lot of hardware that is being upgraded and our
>> support staff do not always remove old accounts from AD.
>>
>> From what I have been told, Computer Accounts have to authenticate
>> themselves with AD within a certain period and a password is changed at
>> this stage.
>>
>> How can I query this?
>>
>> Regards
>>
>> D
>
>

use OLDCMP from joeware.net

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------

"TheNugget2007" <> wrote in message
news:...
> Hi
>
> I have been asked is there a way of working out the date and time a
> computer account has been active on a domain.
>
> Basically we have a lot of hardware that is being upgraded and our support
> staff do not always remove old accounts from AD.
>
> From what I have been told, Computer Accounts have to authenticate
> themselves with AD within a certain period and a password is changed at
> this stage.
>
> How can I query this?
>
> Regards
>
> D