Summary: Use a Windows PowerShell cmdlet from the ActiveDirectory module to obtain details about the default AD DS domain password policy.
How do I use Windows PowerShell to find the default Active Directory Domain Services (AD DS) domain password policy?
Use the Get-ADDefaultDomainPasswordPolicy cmdlet. No arguments are required. Here is an example:
11:25 C:\> Get-ADDefaultDomainPasswordPolicy
ComplexityEnabled : True
DistinguishedName : DC=nwtraders,DC=msft
LockoutDuration : 00:30:00
LockoutObservationWindow : 00:30:00
LockoutThreshold : 5
MaxPasswordAge : 42.00:00:00
MinPasswordAge : 1.00:00:00
MinPasswordLength : 7
objectClass : {domainDNS}
objectGuid : 5765f6d1-cb6e-475d-8ed1-0b9ca6abfec1
PasswordHistoryCount : 24
ReversibleEncryptionEnabled : False
