I may be missing something obvious here, but I've probably been looking at it for too long, and can now not see the wood for the trees. Is there a function in the AD.au3 UDF whereby I can query the age of a computer password, or more precisely generate a list of computers where the password is over x days old. A bit like DSQuery computer -stalepwd 60 DC=domain,DC=com generates, but I want to do it all within AutoIT. I've looked at _AD_GetAccountExpired() which looks like the closest thi