How to check your Active Directory Account details without having access on the Domain Controller

Are you wondering when:

  • You last set your password?
  • When your password expires?
  • When your account expires?
  • When the user last logged on?
  • Which logon script is used?
  • Your membership of certain groups?
  • ….

Above all, you can use the command below to verify this for your own account, as well as for any account within Active Directory.

C:\Windows\system32>net user accountname /dom
The request will be processed at a domain controller for domain domain name.

User name accountname
Full Name Renders Ruben
Comment Administrative account for Ruben Renders (RealDolmen)
User’s comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 20/02/2014 15:55:19
Password expires 21/05/2014 15:55:19
Password changeable 21/02/2014 15:55:19
Password required Yes
User may change password Yes

Workstations allowed All
Logon script
User profile
Home directory
Last logon 20/03/2014 09:56:08

Logon hours allowed All

Local Group Memberships groups
Global Group memberships groups
The command completed successfully.

Leave a Reply