Word – How to see users’ Office 365 Password date (date last changed, date it will expire, etc.)

office365password-managementpowershell

I know I can see the password dates (date last changed, date it will expire, etc.) for our in-house Active Directory. How do I see this information for Office 365 accounts, either with PowerShell or in any other way? This information is very handy to have at times. I especially need to see when people's passwords were changed.

Thanks,
Jono

Best Answer

I think I have it, or at least I have enough to figure out what I need.

Get-MsolUser -userprincipalname user@domain.org | select DisplayName, LastPasswordChangeTimeStamp,@{Name=”PasswordAge”;Expression={(Get-Date)-$_.LastPasswordChangeTimeStamp}}

The result looks like this (date and time format will match your computer's):

DisplayName    LastPasswordChangeTimestamp PasswordAge
-----------    --------------------------- ----------- 
User, Name     09-Mar-16 5:48p             42.22:34:10.6964630

In order to see all users whose passwords are older than 30 days, use this.

Get-MsolUser -All | select DisplayName, LastPasswordChangeTimeStamp,@{Name=”PasswordAge”;Expression={(Get-Date)-$_.LastPasswordChangeTimeStamp}} | where {$_.PasswordAge -gt “30”} | sort-object PasswordAge -descending

It will list all of the users with passwords older than 30 days and sort the list by the password age.

I hope this helps others as well.

Related Solutions

Shell – Comparing two multi-dimensional arrays in PowerShell

Thank you all for your help - they helped to lead me to finding a solution to solve my problem and getting Break/Continue to work properly. Now the performance is more comparable. I had to change the inner loop ($arrTwo) from ForEach-Object to ForEach. That changed the method by which the loop is initiated.

$arrOne | ForEach-Object {
    If ($_.LocalOffice.Length -ge 2)
        {
        $strOneOffice = $_.LocalOffice.substring(0,2)
        }
    Else
        {
        $strOneOffice = "US"
        }
    ForEach ($objTwo in $arrTwo) {
    If ($objTwo.Username -eq $_.Username)
        {
        If ($objTwo.UsageLocation -eq $strOneOffice -ne $True)
            {
            ## Take action here if they don't match
            write-host $_.Username "needs to be updated"
            Break
            }
        Else
            {
            ## Nothing to update here because they already match
            write-host $_.Username "does not need to be updated"
            Continue
            }
        }
    }
}

Windows 2012 Domain Controller NETLOGON error

There were two issues with this case

1) Domain Controllers's Primary DNS has to loop-back address.

2)Second issue was very trivial.. The users I was trying to logon got its passwords expired. :-)

Thanks Colyn1337 for your help.

Best Answer

Related Solutions

Shell – Comparing two multi-dimensional arrays in PowerShell

Windows 2012 Domain Controller NETLOGON error

Related Question