下面有兩個工具程式可以達到你要的目的:
ADManager Plus(Free Edition 限100個帳號):
http://www.manageengine.com/products/ad-manager/windows-active-directory-password-reports.html
Network Password Age(CLI):
http://www.optimumx.com/download/NetPWAge.zip
查詢"使用者必須在下次登入時變更密碼"的狀態
<pre class="c" name="code">dsquery user | dsget user -samid -mustchpwd | find "yes"