Getting badpasswordtime attribute Tagged: badpasswordtime This topic contains 2 replies, has 2 voices, and was last updated by taotao07 2 weeks, 2 days ago. Author Posts July 11, 2017 at 8:48 pm #74716 taotao07Participant Hello there I'm trying to get users who have badpasswordtime updated within past 10 days. I have the following: $date = ((Get-Date).AddDays(-10)).ToString('g') Get-ADUser -Filter "(badpasswordtime -gt '$date')" -SearchBase "OU=Corporate,OU=SomeUserOU,DC=domain,DC=local" -Property badpasswordtime -server someGC For some strange reason it doesn't work... now, if I replace badpasswordtime with pwdlastset it works fine, any ideas? Thank you July 11, 2017 at 9:23 pm #74719 Matt BloomfieldParticipant Are you sure it worked for pwdLastSet rather than PasswordLastSet? pwdLastSet and badPasswordTime are stored as Int64 objects. PasswordLastSet and LastBadPasswordAttempt are stored as DateTime objects. For your comparison, where $date represents a DateTime object, you should do your comparison against LastBadPasswordAttempt. Alternatively, if you have to compare against badPasswordTime, use the ToFileTime() method to convert your date to the correct format: $date = ((Get-Date).AddDays(-10)).ToFileTime() July 12, 2017 at 11:18 am #74745 taotao07Participant ugh, got those two attributes confused, it worked with passwordlastset, but not with pwdlastset. Converting it to Int64 worked, thank you very much! Author Posts You must be logged in to reply to this topic.