I decided to blog this little nugget because everything I found on the web was exactly the opposite of what I wanted to do. Usually when someone is using PowerShell to look for users in the context of the PasswordNeverExpires property, they’re looking for users where PasswordNeverExpires is set to True and they want to set it to False. It’s generally understood that having passwords never expire is a security risk, so most of the time people want to hunt those accounts done. But you know me, I love a good PowerShell challenge and this week someone needed to find all the accounts where the passwords were allowed to expire, so I stepped up to the plate.
↧