How can I see more info about a user in AD?
If you open up Active Directory Users and Computer, go to VIEW and check Advanced Features.
Now go view the properties for a user and there will be an additional tab called Attribute Editor. This will let you see a bunch of information about a user that is normally hidden.
Another method if you have Server 2012+ is to run DSAC.exe scroll down to bottom of the page, type in a name of a user to search for. Now in this screen, you can view password restrictions applied to this user and much more. View the properties of the user and then click the MORE INFORMATION at the bottom left of the page to view the password expiration and login count information.
This URL explains it further: http://blogs.technet.com/b/askds/archive/2011/04/12/you-probably-don-t-need-acctinfo2-dll.aspx
If you are looking for what password policy is assigned, please see this article for information on how to obtain that information via command line and other means.
If you are using a domain policy and want to see when the users password expires you can type : net user <username> /domain
If you are using fine grained password policy you can use Power Shell and the following cmds to view it :
(Get-ADUser –Identity juser –Properties "msDS-UserPasswordExpiryTimeComputed")."msDS-UserPasswordExpiryTimeComputed"
130424796486877485
[datetime]::FromFileTime((Get-ADUser –Identity juser –Properties "msDS-UserPasswordExpiryTimeComputed")."msDS-UserPasswordExpiryTimeComputed")
Sunday, April 20, 2014 11:00:48 AM
(([datetime]::FromFileTime((Get-ADUser –Identity juser -Properties "msDS-UserPasswordExpiryTimeComputed")."msDS-UserPasswordExpiryTimeComputed"))-(Get-Date)).Days
86
Another command to show the values from the net user command via powershell is : get-aduser -filter * -properties passwordlastset, passwordneverexpires | sort name | ft Name, passwordlastset, Passwordneverexpires