Empty Password Users Reporting Tool

User accounts with empty password are more susceptible to attacks. Domain accounts with the PASSWD_NOTREQD property flag set have the potential to login to the domain without a password, regardless of domain-wide policies that enforce minimum password length and password complexity. The "Empty Password Users Report Tool" can be used to find the user accounts with password fields set to null, thereby helping administrators to avoid any security related issues.

Why should one consider this Empty password reporting tool?

1. The provides a single view of all user accounts that have empty / null password.
2. It is easy and convenient when compared to command line tools and scripts.

To generate the Empty Password Users Report:

Before you begin with the report generation, it is essential to set the following attribute values in the Password Policy.

• Set the password minimum length value to '0'.
• Set the Account Lockout threshold value to '0 invalid lockout attempts'.
• Disable Password must meet complexity requirements.

1. Click the "Empty Password Users Report Tool" from the Launcher to start the tool.
2.  Enter details in the Domain Name, User Name and Password text fields.
3. Select the container from the Container Name list.
4. Click on Generate button to get the details of users with empty password.

To view more details about the users with null passwords,

1. Follow steps 1 to 3 as mentioned above.
2. Click on the Advanced button. This opens the "Attributes" dialog.
3. Select from All/Naming/security options and click on "Get Attributes" button to view the entire list.
4. Select the appropriate checkboxes based on your requirements and click OK.
5. Click on Generate button to view the user details.

This will give you all the details of users having null passwords.

Note: After the report is generated, ensure you revert to the actual values of password length and Lockout threshold.