COMMAND EVERYTHING.
Look up the resultant fine-grained password policy for a specific user.
Active Directory · Risk: Low · Documentation VerifiedLast verified: 2026-10-26
Returns a resultant password settings object when a fine-grained policy applies. Consult the default domain policy when none applies.
Get-ADUserResultantPasswordPolicy [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Identity] <ADUser>
[-Partition <String>] [-Server <String>] [<CommonParameters>]Directory read access appropriate to the requested objects is required. Replication diagnostics may require additional delegated directory permissions; use an approved administrative account where necessary.
Windows / ActiveDirectory module · Windows Server 2025 PowerShell reference; RSAT module and domain capabilities determine availability
-Identity (required)Windows with the ActiveDirectory PowerShell module (RSAT), connectivity to an appropriate directory server, and an authenticated directory context. Replace example identities and hosts with authorized targets.
Read-only example. Directory identities, group membership, policies, and topology can expose sensitive organizational information. Store and share results only with authorized recipients.
Get-ADUserResultantPasswordPolicy -Identity 'example.user'Returns a resultant password settings object when a fine-grained policy applies. Consult the default domain policy when none applies.
Sign in to keep your own command reference lists.
Explain or customize this command with AI