Active Directory Password change log Help needed

deca300

Well-Known Member
Joined
Jan 28, 2010
Messages
138
Hey guys

I'm sitting with another issue that I need help with.
I know that you can check when the user last changed his AD password...

BUT, the thing is....
How do I check the dates that this user changed his password since the day his account was created?

Is there some sort of powerShell command that I can run to get this?
Is this even possible?

Please, any help much appreciated.
 

grim

Expert Member
Joined
Jan 6, 2006
Messages
3,733
Not sure about getting a history out of AD but you can enable event subscriptions for Event ID 627 and 628 in the security logs from your DCs as long as you have Account Management auditing enabled on your DCs.

You will then get all the password change events in a single place.
 
Top