Get PasswordLastSet Time For Domain Controller Accounts

Yesterday I posted a way to dump hashes using a Domain Controller account. But how do you know which account to use? And when was it’s password last set? net user unfortunately won’t do computer accounts.
So I decided to write a PowerShell script to find out. Unfortunately Windows 7 doesn’t come with the ActiveDirectory PowerShell module (I’m sure there is another way to do this but here is how I did it.

This is a Security Bloggers Network syndicated blog post authored by Room362. Read the original post at: Room362