dsquery

How can I query users with an expired password in Active Directory?

I need to query Active Directory for a list of users whose password is about to expire. The obvious (and easy) way to do this is with: dsquery user -stalepwd n The problem is that I need to add additional filters to only look for users who are in certain security groups. This is hard to do with the "dsquery user" syntax that has the...

Where can I get dsquery and other tools useful for debugging Active Directory issues?

The dsquery command line tool is mentioned in the solution to several questions about Active Directory. However, my workstation does not have this command line tool. Where do I get it? ...