topic Re: Password policy logs in Active Directory. in Getting Data In

Password policy logs in Active Directory.

aalhabbash1 — Mon, 22 Jul 2019 10:46:56 GMT

Hi Splunker;

Is there way for Splunk monitor password policy in AD, such as; what is content this policy about how number of characters used and how must be long the characters and so on.

Best Regards;

Re: Password policy logs in Active Directory.

richgalloway — Mon, 22 Jul 2019 12:22:43 GMT

Password policy is set in Group Policy Objects, which Splunk does not monitor. You may, however, be able to write a script that collects this information.

Re: Password policy logs in Active Directory.

aalhabbash1 — Mon, 22 Jul 2019 13:36:58 GMT

Dear Richgalloway,

Thank you to response; if you have this script please share the script with me.

Best Regards;

Re: Password policy logs in Active Directory.

richgalloway — Mon, 22 Jul 2019 14:24:28 GMT

I do not have such a script, but it should be easy to create one in PowerShell.