Password Status Reports

11 Reports
About Password Status Reports

Password Status Reports provide comprehensive visibility into password security and lifecycle management. Monitor password expiration, track changes, identify policy violations, and ensure compliance with password security requirements.

Security Compliance

Enforce password policies and requirements

Expiration Tracking

Proactive password expiration management

Risk Detection

Identify weak or non-compliant settings

Example: Password Status Reports

Password Status Reports

Available Reports

Password Expires

Lists all accounts with password expiration enabled, identifying users whose passwords will eventually expire based on domain policy.

Use Cases
  • Audit password expiration settings
  • Verify policy compliance
  • Plan password rotation campaigns
  • Identify expiration-enabled accounts
Key Information
  • Password expiration dates
  • Last password change
  • Password age
  • Expiration policy applied
  • Days until expiration
Pro Tip: Use with "Expires Within XX Days" for proactive password management.
Password Expires Within XX Days

Proactive report showing passwords expiring within customizable timeframe. Essential for notification and preventing lockouts.

Use Cases
  • Proactive expiration notifications
  • Prevent account lockouts
  • Help desk planning
  • User communication campaigns
Key Information
  • Exact expiration dates
  • Days remaining
  • User contact information
  • Last password set date
  • Password age
Customizable: Right-click to change days. Recommended: 14 days for advance notice.
Password Expires Between Specified Dates

Filter password expirations by date range for targeted campaigns and planning.

Use Cases
  • Quarterly password campaigns
  • Scheduled bulk notifications
  • Help desk resource planning
  • Maintenance window coordination
Key Information
  • Expiration within range
  • Distribution by date
  • User details for notifications
  • Department grouping
  • Volume metrics
Pro Tip: Use for monthly planning - set range to upcoming 30 days.
Password Expired

Critical report showing accounts with expired passwords requiring immediate reset.

Use Cases
  • Identify locked out users
  • Priority help desk queue
  • Forced password resets
  • Access restoration
Key Information
  • Expiration date (past)
  • Days since expiration
  • User unable to login
  • Contact information
  • Last successful login
Urgent: These users cannot login. Immediate password reset required.
Password Never Expires

Shows accounts exempt from password expiration - requires security review.

Use Cases
  • Audit security exceptions
  • Identify service accounts
  • Compliance review
  • Policy violation detection
Key Information
  • Never-expire configured accounts
  • Account type (user/service)
  • Last password change
  • Password age
  • Justification status
Security Warning: Regular user accounts should NOT have this setting. Review for compliance.
Password Changed During Last XX Days

Tracks recent password changes for security monitoring and user activity.

Use Cases
  • Monitor password change activity
  • Security incident investigation
  • User compliance tracking
  • Change frequency analysis
Key Information
  • Recent change timestamps
  • Changed by user or admin
  • Originating computer
  • Previous change date
  • Change patterns
Best Practice: Monitor daily (1 day) to detect unauthorized password changes.
Password Changed Between Specified Dates

Historical analysis of password changes within specific timeframe.

Use Cases
  • Campaign effectiveness analysis
  • Compliance period auditing
  • Security incident correlation
  • Change volume metrics
Key Information
  • Changes within date range
  • Distribution over time
  • User compliance rates
  • Administrator resets
  • Trend analysis
Pro Tip: Use after password campaigns to measure effectiveness.
Must Change Password at Next Logon

Lists accounts flagged for mandatory password change on next authentication.

Use Cases
  • New user accounts verification
  • Security reset tracking
  • Compromised account remediation
  • Onboarding workflow validation
Key Information
  • Forced change status
  • Account creation date
  • Last logon attempt
  • Reason for reset
  • Set by administrator
Note: Common for new accounts and password resets by administrators.
Password Required

Standard accounts requiring password authentication - most user accounts.

Use Cases
  • Verify password requirements
  • Baseline security configuration
  • Standard account identification
  • Policy compliance verification
Key Information
  • Password required setting
  • Account security status
  • Authentication methods
  • Password complexity requirements
  • Policy compliance
Security Standard: All regular user accounts should have this setting enabled.
Password Not Required

Critical security risk - accounts that can authenticate without password.

Use Cases
  • Identify critical security risks
  • Compliance violation detection
  • Emergency security audit
  • Policy enforcement
Key Information
  • Password not required accounts
  • Security vulnerability status
  • Account type and purpose
  • Justification (if any)
  • Risk level
Critical Security Risk: These accounts are major vulnerabilities. Enable password requirement immediately!
With Encrypted Password (Reversible Encryption)

Accounts storing passwords with reversible encryption - security concern requiring review.

Use Cases
  • Security vulnerability assessment
  • Legacy application identification
  • Compliance risk evaluation
  • Migration planning
Key Information
  • Reversible encryption enabled
  • Associated applications
  • Security implications
  • Legacy system requirements
  • Remediation options
Security Warning: Reversible encryption is weak. Disable unless required by specific legacy applications.
See These Reports in Action

Try AD Reports free for 14 days — run any of these reports on your own Active Directory.

Download Free Trial View All Features