COMMAND EVERYTHING.
Inventory fine-grained password policies before comparing account requirements.
Active Directory · Risk: Low · Documentation VerifiedLast verified: 2026-10-26
Returns password settings objects; it does not determine which policy applies to every user.
Get-ADFineGrainedPasswordPolicy [-AuthType <ADAuthType>] [-Credential <PSCredential>] -Filter <String>
[-Properties <String[]>] [-ResultPageSize <Int32>] [-ResultSetSize <Int32>] [-SearchBase <String>]
[-SearchScope <ADSearchScope>] [-Server <String>] [<CommonParameters>]Directory read access appropriate to the requested objects is required. Replication diagnostics may require additional delegated directory permissions; use an approved administrative account where necessary.
Windows / ActiveDirectory module · Windows Server 2025 PowerShell reference; RSAT module and domain capabilities determine availability
-Filter (required)Windows with the ActiveDirectory PowerShell module (RSAT), connectivity to an appropriate directory server, and an authenticated directory context. Replace example identities and hosts with authorized targets.
Read-only example. Directory identities, group membership, policies, and topology can expose sensitive organizational information. Store and share results only with authorized recipients.
Get-ADFineGrainedPasswordPolicy -Filter '*'Returns password settings objects; it does not determine which policy applies to every user.
Sign in to keep your own command reference lists.
Explain or customize this command with AI