Need to check the ages on the trusts in your forest?[1] for /f "tokens=*" %i in (‘adfind -sc domainlist‘) do adfind -h %i -binenc -f "&(samaccounttype=805306370)(pwdlastset<={{CURRENT:-180d}})" canonicalname name pwdlastset -tdcd -csv -nodn -sort pwdlastset joe [1] If you don’t audit your trusts to see if they have gone stale, you certainly […]