can GAM show the last password change date?

[Eliz]

We gave all our users a standard password when we 'went google'. Now we want to force anyone who hasn't changed their password to do so, but would like to target specific users rather than forcing the whole organization to do a reset. Can GAM display the last password change date? If not, can it display the "Set by user/Set by Admin" information that you can see if you view a single record in the google console?

Thanks.

Eliz

[Cliff Wakefield]

Hi,

The print users command can return the change password state of a user

http://code.google.com/p/google-apps-manager/wiki/ExamplesCSV#Printing_all_users

gam print users username changepassword

It will return true if the password needs to be changed by the user, it won't let you determine how they got into that state (ie: whether it's the original password or not)

I think this is the closest you are going to get with GAM.

[Erik van den Hoorn]

I know this is an old topic. But for anyone who reads this. Since 2018 it is possible to set a pw expiration policy in the security settings of the G Suite admin console.

[+KimNilsson]

Which you should absolutely never do.

It's a horrible policy that was completely abandoned by any responsible admins during the summer of 2017, with official announcement from NIST.

[Erik van den Hoorn]

Thanks for sharing this. I was curious about the reasoning behind this so I looked it up: Here is some more information about this for whoever is interested.