Log in

No account? Create an account

Previous Entry | Next Entry

Have you gone into ADSIEDIT.MSC and found the value of an object's pwdLastSet attribute? You'll get something that looks like 127889763885744389 which, frankly, means nothing. How can you convert this number into some date and time that means something?

Well, if you have Windows XP or Windows Server 2003, there is a really simple way of doing this because it's part of the operating system! It's called W32tm

INPUT: w32tm /ntte 127889763885744389
OUTPUT: 148020 13:26:28.5744389 - 4/8/2006 6:26:28 AM (local time)



Aug. 25th, 2006 09:23 pm (UTC)
Aug. 26th, 2006 04:16 am (UTC)
You can also view this type of information in a user properties page in the AD as well. If you run the following command, regsvr32 %systemroot%\system32\acctinfo.dll, a new tab will exist called Additional Acct Info in a user. This gives all sorts of info such as last logon / logoff time stamp, last change of password, etc. A picture can be found here.
Aug. 26th, 2006 07:26 pm (UTC)
It's included in the Window Server 2003 Resource Kit.

Great for a user accounts. Shame it doesn't work with computer accounts as well, which is what I was doing at the time I found this out. ;)
Aug. 26th, 2006 11:29 am (UTC)
I am secure enough in my masculinity to admit that I don't understand a single word you typed.
Aug. 26th, 2006 07:11 pm (UTC)