Reset An AD Users Password Expiry Date - PeteNetLive

Reset an AD Users Password Expiry Date Home » Active Directory » Reset an AD Users Password Expiry Date

KB ID 0001272

Problem

I was setting up a Cisco ASA this week and needed to enable the ability for users to reset their domain passwords when they are about to expire. To actually test that, I needed a test user that had their password either about to expire, or actually expired. As I dint want to wait 42 days, or setup a password policy just for one user, I needed to find a ‘quick and dirty’ fix for one user.

Solution

You need to open Active Directory Users and Computers, and you need to have ‘Advanced options’ enabled. Locate your user and open their properties > Attribute Editor > Attributes > pwdLastSet.

If you want to set it to expired, then set its value to Zero.

It should change to <never>, which is not strictly true, it actually changes to 12:00AM January 1st 1601.

Note: If you set its value to -1 and apply the change it resets the attribute to the current day and time (you may need to close and reopen the property dialog to see the change).

Related Articles, References, Credits, or External Links

NA

Author: PeteLong

Share This Post On

• Google
• Facebook
• Twitter

5 Comments

1. Moorken

   07/04/2020

   Does there any powershell script exist to do this, or an easy tool which we could give to low level admins?

   Post a Reply
   • PeteLong

     07/04/2020

     I’ve not done it. but experiment with GET-ADUser -Identity {username} -PasswordLastSet and Set-ADUser

     P

     Post a Reply
     • AAC

       20/04/2020

       $User = Get-ADUser username -properties pwdlastset $User.pwdlastset = 0 Set-ADUser -Instance $User $user.pwdlastset = -1 Set-ADUser -instance $User

       Post a Reply
       • KOALA

         22/09/2023

         Thank you, that worked as a charm!

         Post a Reply
       • KOALA

         22/09/2023

         + there is:

         $User = “YourSAMAccount” Set-ADUser -Identity $User -Replace @{pwdlastset=”0″} Set-ADUser -Identity $User -Replace @{pwdlastset=”-1″}

         Post a Reply

Submit a Comment Cancel reply

Your email address will not be published. Required fields are marked *

Comment *

Name *

Email *

Website

Δ

Search for: NameEmail

Privacy Policy | Copyright PeteNetLive © 2025