获取当前域密码策略：Get-ADDefaultDomainPasswordPolicy

命令

Get-ADDefaultDomainPasswordPolicy

ComplexityEnabled           : True
DistinguishedName           : DC=hxx,DC=tt
LockoutDuration             : 00:30:00
LockoutObservationWindow    : 00:30:00
LockoutThreshold            : 0
MaxPasswordAge              : 42.00:00:00
MinPasswordAge              : 1.00:00:00
MinPasswordLength           : 7
objectClass                 : {domainDNS}
objectGuid                  : de48adf8-9f2f-44ec-8b38-3850487b8505
PasswordHistoryCount        : 24
ReversibleEncryptionEnabled : False

规格

ComplexityEnabled：密码必须符合复杂性要求

MaxPasswordAge：密码最长使用期限

MinPasswordAge：密码最短使用期限

MinPasswordLength：最小密码长度

PasswordHistoryCount：强制密码历史