The two scripts, one using the NetIQ DRA ADSI provider and the other using the Microsoft ADSI provider can be used to determine when a computer password was last changed.

Both providers maintain the property called pwdLastSet for computer and user objects in Active Directory. However, the DRA ADSI provider maintains this value as a Date that can be retrieved using ordinary scripting techniques, but the LDAP provider returns the value as INTEGER8 which requires special handling in scripts.

The two scripts enumerate computer accounts differently. The script using the LDAP provider performs a search for all computer objects in a domain, then binds to each computer applying the PasswordLastChanged method to determine when the computer password was last changed. The DRA ADSI provider determines computers by enumerating the members of the group, Domain Computers.

NetIQ does not test or validate any software, code or other materials provided in, on or through NetIQ Cool Solutions (collectively, "Materials"), so please use caution when downloading or accessing any Materials from Cool Solutions and ensure that you have reasonable and current security, spyware and anti-virus measures in place on your computer and/or network prior to downloading. Additionally, do not use any Materials downloaded from Cool Solutions in any production environment without first testing the Materials to ensure they are compatible with your version of NetIQ software or any other hardware or software present in your network or environment. Cool Solutions is not a substitute for authorized NetIQ support and should not be used as such. NETIQ COOL SOLUTIONS AND ANY MATERIALS ARE PROVIDED ON AN AS-IS, AS-AVAILABLE BASIS WITHOUT ANY WARRANTY OF ANY KIND. By downloading this file, you are agreeing to these terms of use. To report a problem please contact: coolguys-netiq@netiq.com. Your use of Cool Solutions is governed by the Cool Solutions Terms and Conditions. https://www.netiq.com/communities/coolsolutions/terms-and-conditions/