{"id":4211,"date":"2013-02-04T11:59:00","date_gmt":"2013-02-04T11:59:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2013\/02\/04\/powertip-use-a-powershell-cmdlet-to-get-the-default-ad-ds-domain-password\/"},"modified":"2013-02-04T11:59:00","modified_gmt":"2013-02-04T11:59:00","slug":"powertip-use-a-powershell-cmdlet-to-get-the-default-ad-ds-domain-password","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/powertip-use-a-powershell-cmdlet-to-get-the-default-ad-ds-domain-password\/","title":{"rendered":"PowerTip: Use a PowerShell Cmdlet to Get the Default AD DS Domain Password"},"content":{"rendered":"<p><strong style=\"font-size: 12px\">Summary:<\/strong><span style=\"font-size: 12px\">&nbsp;Use a Windows PowerShell cmdlet from the ActiveDirectory module to obtain details about the default AD DS domain password policy.<\/span><\/p>\n<p><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/q-for-powertip.jpg\" alt=\"Hey, Scripting Guy! Question\" \/>&nbsp;How do I use Windows PowerShell to find the default Active Directory Domain Services (AD DS) domain password policy?<\/p>\n<p style=\"padding-left: 60px\"><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/a-for-powertip.jpg\" alt=\"Hey, Scripting Guy! Answer\" \/>&nbsp;Use the&nbsp;<strong>Get-ADDefaultDomainPasswordPolicy<\/strong>&nbsp;cmdlet. No arguments are required. Here is an example:<\/p>\n<p style=\"padding-left: 120px\">11:25 C:\\&gt;&nbsp; Get-ADDefaultDomainPasswordPolicy<\/p>\n<p style=\"padding-left: 120px\">ComplexityEnabled&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : True<\/p>\n<p style=\"padding-left: 120px\">DistinguishedName&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : DC=nwtraders,DC=msft<\/p>\n<p style=\"padding-left: 120px\">LockoutDuration&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : 00:30:00<\/p>\n<p style=\"padding-left: 120px\">LockoutObservationWindow&nbsp;&nbsp;&nbsp; : 00:30:00<\/p>\n<p style=\"padding-left: 120px\">LockoutThreshold&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : 5<\/p>\n<p style=\"padding-left: 120px\">MaxPasswordAge&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : 42.00:00:00<\/p>\n<p style=\"padding-left: 120px\">MinPasswordAge&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : 1.00:00:00<\/p>\n<p style=\"padding-left: 120px\">MinPasswordLength&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : 7<\/p>\n<p style=\"padding-left: 120px\">objectClass&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : {domainDNS}<\/p>\n<p style=\"padding-left: 120px\">objectGuid&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : 5765f6d1-cb6e-475d-8ed1-0b9ca6abfec1<\/p>\n<p style=\"padding-left: 120px\">PasswordHistoryCount&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : 24<\/p>\n<p style=\"padding-left: 120px\">ReversibleEncryptionEnabled : False<\/p>\n<p><a href=\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/7610.Dr.ScriptoForTips.jpg\"><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/7610.Dr.ScriptoForTips.jpg\" alt=\"\" border=\"0\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Summary:&nbsp;Use a Windows PowerShell cmdlet from the ActiveDirectory module to obtain details about the default AD DS domain password policy. &nbsp;How do I use Windows PowerShell to find the default Active Directory Domain Services (AD DS) domain password policy? &nbsp;Use the&nbsp;Get-ADDefaultDomainPasswordPolicy&nbsp;cmdlet. No arguments are required. Here is an example: 11:25 C:\\&gt;&nbsp; Get-ADDefaultDomainPasswordPolicy ComplexityEnabled&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : True [&hellip;]<\/p>\n","protected":false},"author":596,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[356,3,45],"class_list":["post-4211","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-powertip","tag-scripting-guy","tag-windows-powershell"],"acf":[],"blog_post_summary":"<p>Summary:&nbsp;Use a Windows PowerShell cmdlet from the ActiveDirectory module to obtain details about the default AD DS domain password policy. &nbsp;How do I use Windows PowerShell to find the default Active Directory Domain Services (AD DS) domain password policy? &nbsp;Use the&nbsp;Get-ADDefaultDomainPasswordPolicy&nbsp;cmdlet. No arguments are required. Here is an example: 11:25 C:\\&gt;&nbsp; Get-ADDefaultDomainPasswordPolicy ComplexityEnabled&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : True [&hellip;]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/4211","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/596"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=4211"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/4211\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=4211"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=4211"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=4211"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}