DSQuery

[FirewallVictim]

Im looking for a method to query active directory to show which users
have passwords, not what the passwords are just whether they have a
password or not not. My first question is, Is DSQuery capable of doing
this? And secondly, is dsquery available for download? as I am using
Win 2000 Server not 2003. If so, where is it available from?

Thanks

 

[Chriss3 [MVP]]

In fact all accounts have a password, You can check if they require to
change it.

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup

 

[Joe Richards [MVP]]

A blank password is still a password. No you can not do a query that will tell
you who is using a certain password (even blank).

joe

 

[Guest]

That is correct all user accounts will have the Password attribute, it is
required to create the object, whether it is blank or not is a different
story. If this is what you are trying to determine, I would suggest a
script that collects all the user accounts and then attempts authentication
with a blank password.

Im not sure what your end goal is but, if you are trying to force users to
use a password you might look into the Group Policy password settings.