PowerShell Get-ADUser 密码过期给出了错误的日期

Question

I have the following command executed in PowerShell:

Get-ADUser -Identity dummyUser -Properties *

When I check the AccountExpirationDate it is giving tomorrow's date whereas it was set to Yesterday date. How can I get the exact date?

Answer 1

I believe you're looking for password and account expiration

To identify password expiration you can use the following for a particular user:

Get-ADUser -identity name –Properties "DisplayName", "msDS-UserPasswordExpiryTimeComputed" |
Select-Object -Property "Displayname",@{Name="ExpiryDate";Expression={[datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed")}}

Another option which allows you to target everyone within your AD:

Get-ADUser -filter {Enabled -eq $True -and PasswordNeverExpires -eq $False} –Properties "DisplayName", "msDS-UserPasswordExpiryTimeComputed" | 
Select-Object -Property "Displayname",@{Name="ExpiryDate";Expression={[datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed")}}

With regards to identifying an AD account expiration date:

get-aduser -identity mame -properties AccountExpirationDate,accountExpires | select samaccountname, `
@{Name="AccountExpirationDate";Expression={([datetime]::FromFileTime($_.AccountExpirationDate))}},`
@{Name="accountExpires";Expression={([datetime]::FromFileTime($_.accountExpires))}}

Do note, however, if the account is set to never expire your output will look similar to:

samaccountname AccountExpirationDate accountExpires
-------------- --------------------- --------------
name           01/01/1601 00:00:00   

Answer 2

I guess you have Fine-Grained Password Policy enabled.

To get the get the Active Directory fine-grained password policy, use:

• Get-ADFineGrainedPasswordPolicy

To get the resultant password policy for a user, use:

• Get-ADUserResultantPasswordPolicy