I try to list all the users with their PasswordLastSet with this
`get-aduser -filter * -Server FQDN -SearchBase “OU=Test,OU=Test1,DC=domain,DC=local” -properties PasswordLastSet |sort name | ft name, PasswordLastSet`
problem is the PasswordLastSet is almost always blank.
If I run the command with different admin credentials I get, sometime, some of the user with the correct data in it.
I notice looking around a lot of people do this searches with the DirectorySearcher Class.
It seems to be a permission problem of some sort, but I can’t pinpoint exactly what and why a domain admin should be prevented to read this data that is certainly not a secret, especially for a domain admin.
Anybody can shed some light on the matter?