COMMAND EVERYTHING.
Review the default domain password policy during a security configuration audit.
Active Directory · Risk: Low · Documentation VerifiedLast verified: 2026-10-26
Returns the default policy. Fine-grained policies can produce a different effective policy for individual users.
Get-ADDefaultDomainPasswordPolicy [-AuthType <ADAuthType>] [-Credential <PSCredential>]
[[-Current] <ADCurrentDomainType>] [-Server <String>] [<CommonParameters>]Directory read access appropriate to the requested objects is required. Replication diagnostics may require additional delegated directory permissions; use an approved administrative account where necessary.
Windows / ActiveDirectory module · Windows Server 2025 PowerShell reference; RSAT module and domain capabilities determine availability
Windows with the ActiveDirectory PowerShell module (RSAT), connectivity to an appropriate directory server, and an authenticated directory context. Replace example identities and hosts with authorized targets.
Read-only example. Directory identities, group membership, policies, and topology can expose sensitive organizational information. Store and share results only with authorized recipients.
Get-ADDefaultDomainPasswordPolicyReturns the default policy. Fine-grained policies can produce a different effective policy for individual users.
Sign in to keep your own command reference lists.
Explain or customize this command with AI