Active Directory Password Reports

 



 

General  Password Reports

 

Recently Bad Logged on Users

 

This report provides the list of users who failed to login.

 

How it works: The report is generated by querying users with LDAP attributes (badPasswordTime>=specified time).

 

To View the reports Select the domain, enter the number of days and click generate.

 

Users who cannot change their password Report

 

This report provides the list of users who cannot change their password.

 

How it works: The report is generated by querying users with userAccountControl flag set to "Password Cannot Change".

 

To View the reports Select the domain and click generate.

 

Users whose Password Never Expires Report

 

This report provides the list of users whose passwords never expire.

 

How it works: The report is generated by querying the users with userAccountControl flag set to "Password Never Expires".

 

To View the reports Select the domain and click generate.

 

Password Status Reports

 

Know the Tabs

 

Disable: You can select the user accounts that you need to disable and click on Disable. This helps in keeping Active Directory free from Password Expired users preventing an unauthorized access to the expired accounts.

 

Change Password at Next Logon: This Prompts the selected users to change their password in their next logon. This helps in having Passwords active and secure.

More Actions: This will enable you to change the Attributes settings of the selected user. Clicking on this will lead you to AD Management where in you can select the attribute type and define the new settings by Domain wise.

 

Password Expired Users Report

 

This report provides the list of users whose passwords are expired.

 

How it works: The report is generated by querying the users with userAccountControl flag not set to "Password Never Expires" and attributes “(!(pwdLastSet=0))(pwdLastSet<=time based on domain password policy)”.

 

To View the reports Select the domain, enter the number of days and click generate.

 

Soon-to-expire User Passwords Report

 

This report provides the list of users whose passwords will expire in given ‘n’ days.

 

How it works: The report is generated by querying the users with userAccountControl flag not set to "Password Never Expires" and attributes “(!(pwdLastSet<=time based on domain password policy))(pwdLastSet<=specified time)”.

 

To View the reports Select the domain, enter the number of days and click generate.

 

Recently Password Changed users Report: This report provides the list of users whose passwords are modified in given ‘n’ days.

 

How it works: The report is generated by querying the LDAP for attributes (&(!(pwdLastSet=0))(!(pwdLastSet>=specified time))).

 

To View the reports Select the domain, enter the number of days and click generate.

 

Recently Password Unchanged users Report

 

This report provides the list of users whose passwords are not modified in given ‘n’ days.

 

How it works: The report is generated by querying the LDAP for attributes (&(!(pwdLastSet=0))(pwdLastSet>=specified time)).

 

To View the reports Select the domain, enter the number of days and click generate.



Copyright © 2007, AdventNet Inc. All Rights Reserved.