Quick Tip: Determine Active Directory Account Status From The Windows Commandline

Use the following command to Determine Active Directory Account Status from the Windows Commandline without Powershell or any special software. User info like:

• Is the account active?
• When does the account expire?
• When was the password last set?
• When does the password expire?
• When did the user last login?
• etc.

net user /domain <USERNAME>

This command will display the following domain user information:

User name                    USERNAME
Full Name                    USER NAME
Comment                      CNC NINJA
User's comment		     YES, THAT'S RIGHT... NINJA!
Country/region code          000 (System Default)
Account active               Yes
Account expires              Never

Password last set            1/6/2021 8:32:30 AM
Password expires             Never
Password changeable          1/6/2021 8:32:30 AM
Password required            Yes
User may change password     Yes

Workstations allowed         All
Logon script		     \\SERVER\SHARE\LOGON.CMD
User profile
Home directory
Last logon                   10/23/2023 9:28:32 AM

Logon hours allowed          All

Local Group Memberships
Global Group memberships     *RED-NINJAS *JDE-MASTERS

There are many tasks that can be completed with the “net user” command. The following link goes into further detail:
ShellGeek

Author

Stewart Schatz

Career: Principal CNC Consultant for Syntax Systems Limited specializing Oracle JD Edwards EnterpriseOne and the technology that supports it. Side Hustle: Owner/Operator of E1Tips.com Location: Lancaster, PA USA  What I like to do: Invest in Family, Explore Technology, Lead Teams, Share Knowledge/Experience, Hunt, Hike, etc.

stewart@9rains.com

http://stewartschatz.com