Jul 162018
 

This can be fun, but don’t expect to find it often:

Get-ADUser -filter {PasswordNotRequired -eq “True”} -properties * | select SamAccountName,surname,givenname,LockedOut,PasswordNotRequired,enabled | Format-Table -AutoSize

Don’t forgot to check old passwords, too:

Get-ADUser -filter * -properties * | select SamAccountName,surname,givenname,PasswordLastSet,PrimaryGroup,LastLogonDate , LockedOut , logonCount , PasswordNotRequired, BadLogonCount, badPwdCount, Enabled | Format-Table -Property * -autosize | Out-String -Width 4096 | Out-File C:\pw-last-set.txt