Password policy logs in Active Directory.

[aalhabbash1]

Hi Splunker;

Is there way for Splunk monitor password policy in AD, such as; what is content this policy about how number of characters used and how must be long the characters and so on.

Best Regards;

[richgalloway]

Password policy is set in Group Policy Objects, which Splunk does not monitor. You may, however, be able to write a script that collects this information.

[aalhabbash1]

Dear Richgalloway,

Thank you to response; if you have this script please share the script with me.

Best Regards;

[richgalloway]

I do not have such a script, but it should be easy to create one in PowerShell.