https://remkoweijnen.nl/blog/tags/maxpwdage/Recent content in MaxPwdAge on Remko's BlogHugoen-usFri, 02 Dec 2011 13:47:44 +0000https://remkoweijnen.nl/blog/2011/12/02/read-maximum-password-age-with-powershell/Fri, 02 Dec 2011 13:47:44 +0000https://remkoweijnen.nl/blog/2011/12/02/read-maximum-password-age-with-powershell/<p><a href="https://remkoweijnen.nl/blog/wp-content/uploads/2011/12/image1.webp" class="glightbox" data-type="image" data-gallery="post-2212"><img loading="lazy" decoding="async" style="margin: 0px 5px 0px 0px; display: inline; float: left" title="image" alt="image" align="left" src="https://remkoweijnen.nl/blog/wp-content/uploads/2011/12/image_thumb1.webp" width="33" height="39" /></a>I needed to read out the Maximum Password age with a PowerShell script in a Windows 2003 domain.</p> <p>Reading out the <a href="http://msdn.microsoft.com/en-us/library/windows/desktop/ms676863(v=vs.85).aspx" target="_blank">maxPwdAge</a> attribute is a trivial task&#160; in PowerShell (I am re-using the function <a href="https://remkoweijnen.nl/blog/2011/12/01/convert-iadslargeinteger-to-int64-in-powershell/" target="_blank">AdsLargeIntegerToInt64</a>):</p> <div class="codecard"> <div class="codehead"> <span class="codefile"></span> <span class="codetools" data-pagefind-ignore> <span class="codelang">text</span> <button class="codebtn" type="button" data-copy>Copy</button> <a class="codebtn" download=".txt" href="data:text/plain;charset=utf-8;base64,JGRvbWFpbiA9ICBOZXctT2JqZWN0IFN5c3RlbS5EaXJlY3RvcnlTZXJ2aWNlcy5EaXJlY3RvcnlFbnRyeQoKIyBSZWFkIG1heFB3ZEFnZSBhdHRyaWJ1dGUgYW5kIGNvbnZlcnQgdG8gSW50NjQKJG1heFB3ZEFnZSA9IEFkc0xhcmdlSW50ZWdlclRvSW42NCAkRG9tYWluLm1heFB3ZEFnZS5WYWx1ZQ==">Download</a> </span> </div> <div class="codebody"><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">$domain = New-Object System.DirectoryServices.DirectoryEntry </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"># Read maxPwdAge attribute and convert to Int64 </span></span><span class="line"><span class="cl">$maxPwdAge = AdsLargeIntegerToIn64 $Domain.maxPwdAge.Value</span></span></code></pre></div></div> </div> <p>In my case this returns the value -78624000000000 but how do we interpret this? <br /></p>