PowerTip: Use a PowerShell Cmdlet to Get the Default AD DS Domain Password

Summary: Use a Windows PowerShell cmdlet from the ActiveDirectory module to obtain details about the default AD DS domain password policy.

 How do I use Windows PowerShell to find the default Active Directory Domain Services (AD DS) domain password policy?

 Use the Get-ADDefaultDomainPasswordPolicy cmdlet. No arguments are required. Here is an example:

11:25 C:\>  Get-ADDefaultDomainPasswordPolicy

ComplexityEnabled           : True

DistinguishedName           : DC=nwtraders,DC=msft

LockoutDuration             : 00:30:00

LockoutObservationWindow    : 00:30:00

LockoutThreshold            : 5

MaxPasswordAge              : 42.00:00:00

MinPasswordAge              : 1.00:00:00

MinPasswordLength           : 7

objectClass                 : {domainDNS}

objectGuid                  : 5765f6d1-cb6e-475d-8ed1-0b9ca6abfec1

PasswordHistoryCount        : 24

ReversibleEncryptionEnabled : False