Retrieve Details of a Fine-Grained Password Policy

Applies To: Windows Server 2008 R2

This topic explains how to use the Active Directory module for Windows PowerShell to retrieve the details of a fine-grained password policy.


The following example demonstrates how to retrieve the details of the fine-grained password policy AdminsPSO:

Get-ADFineGrainedPasswordPolicy AdminsPSO

Additional information

In addition to the standard Lightweight Directory Access Protocol (LDAP) attributes, you can retrieve the following extended properties of the Get-ADFineGrainedPasswordPolicy cmdlet by using the -Properties parameter:

  • AppliesTo

  • ComplexityEnabled

  • LockoutDuration

  • LockoutObservationWindow

  • LockoutThreshold

  • MaxPasswordAge

  • MinPasswordAge

  • MinPasswordLength

  • PasswordHistoryCount

  • Precedence

  • ReversibleEncryptionEnabled

For a full explanation of the parameters that you can pass to Get-ADFineGrainedPasswordPolicy, at the Active Directory module command prompt, type Get-Help Get-ADFineGrainedPasswordPolicy –detailed, and then press ENTER.