The Active Directory Service Interfaces (ADSI) Windows NT provider does not support the PasswordLastChanged Property of an IADsUser object. You can computer this date by subtracting the password expiration period from the password expiration date to get the last change date. Note that for users whose passwords never expire, the PasswordExpirationDate will be in the past and the computation still works correctly.

Back to the top

The following Visual Basic code illustrates this:

Set adsUser = GetObject("WinNT://" & strDomain & "/" & strUser & _
       ",user")

   Debug.Print "Password Last Changed on : " & CStr( _
       DateAdd("s", -adsUser.Get("MaxPasswordAge"), _
           adsUser.PasswordExpirationDate))
				

Back to the top

Active Directory Service Interfaces (ADSI) documentation is available in the Platform SDK section of MSDN and in a help file you can download from the following Web site:

Back to the top