How To Find When A User Password Expires?

As an admin, how do we find out when a user’s password expires? It is easy to find, once you know the command ;) The one we need to run is Net User username /domain from the command prompt. It gives you more info than what you are looking for, but it has all the…

As an admin, how do we find out when a user’s password expires?

It is easy to find, once you know the command ;)

The one we need to run is Net User username /domain from the command prompt. It gives you more info than what you are looking for, but it has all the info about the password – when the password was changed, when will it expire etc.

Find when user password expires

13 Comments

  1. You can run it from any domain account on the same network :)

    1. Rajith Jose Enchiparambil says:

      Thanks James.

  2. Does this need to be ran on Domain Controller?

    1. Rajith Jose Enchiparambil says:

      Hi Edmundo,

      You should be able to run it from any server.

      Thanks

  3. Works quite well thanks!

    btw, I tried without the /domain in a win 2003 R2 and it worked fine.

    1. Rajith Jose Enchiparambil says:

      Thanks Pnatel.

      The /domain is only required in Windows XP.

      1. The /domain is used to indicate that the account is a domain account (in the current domain), not a local account. I found this out experimentally, as I was trying to lookup information on both domain and local accounts in Windows 7. net user /help confirms this.

        For example

        net user nondomainuser

        returns the user info

        net user nondomainuser /domain

        returns “the user name could not be found”

        net user domainuser

        returns “the user name could not be found”

        net user domainuser /domain

        returns the user info

        1. Rajith Jose Enchiparambil says:

          Thanks for the examples Chris. Much appreciated.

  4. Pat Richard says:

    It doesn’t appear that /domain is required. You get all of the desired info with out it.

    1. Rajith Enchiparambil says:

      Hi Pat,

      Tested on an XP machine and it does need the /domain.
      Did you test it on Windows 7?

      Thanks,

  5. Prakash Jha says:

    This is the command i use, when users call and tell me they are unable to log in. Use this command to quickly verify if their password has expired.
    In case it has, you can quickly reset it using Powershell using the set-adaccountpassword cmdlet.

    1. Rajith Enchiparambil says:

      Thanks Prakash for the tip.

    2. Walter Rodrigues says:

      Thank You very much for this. helps a lot.

Leave a Reply

Your email address will not be published. Required fields are marked *