The password for Windows ensures the security of your PC, as it is used to log in to your computer for use. It is one of the best practices to monitor who changed the password and when it was changed, especially when multiple individuals use your PC. Similarly, in a networking environment with multiple connected computers and some people having administrative privileges, tracking password changes can prevent disruptions to the network.

Last Change Password Information on CMD - 1

Last Change Password Information on CMD

Knowing who changed the password and when it was changed can help detect and remove networking problems, such as people being unable to log in to their computers or someone disrupting the network.

We can check whether the issue is due to an expired password or something related to an incorrect password. This can be done in CMD or PowerShell. To check the last password change in Windows using CMD or PowerShell, follow the steps given below.

1. Using CMD

The “net user” command helps to identify by whom and when a password was changed, as well as its nature. It is helpful in networking or when multiple people are using the same computer. To check the last password change in Windows using CMD, follow these steps:

1.1 For a Single PC

  1. Search for “cmd” in the Windows search bar.
  2. Right-click and Run it as administrator . Opening CMD
  3. Run the following command
net user %username%

Replace “%username%” with the relevant username of your PC.

Last Password information in cmd - 2

Last Password information in cmd

1.2 For domain-joined PC

For a domain-joined PC, you will need to log in from a domain-joined computer with administrative powers and follow these steps.

  1. Search for “CMD” in the Windows search bar.
  2. Run it and Run the following command
net user %username% /domain

Here, Make sure that you change “%username% and domain” to the correct information.

The domain can be found by running the following command in cmd

echo %userdomain%

So, These are the steps you can follow and check the Last changed password information in Windows PC and Domain-Joined PC as well. For a server, you have to use Windows PowerShell.

2. Using Windows Powershell

PowerShell offers a wide variety of built-in commands suitable for networking and gathering information about a computer using Windows. One such command is “Get-ADUser,” which is used to obtain information about the last changed password. To learn about a Windows user’s last password change using Powershell, follow these steps:

  1. Search for “Windows PowerShell” in the Windows search bar.
  2. Right-Click and click on “Run as Administrator” . Opening Windows PowerShell
  3. Now, Type the following command
  4. And press Enter, The Last changed password information will be given for the specified user account.
Get-ADUser -Identity [username] -Properties * | Select-Object -Property *passwordlastset

Here, Replace [username] with the respective server username.

Checking Password information through Windows PowerShell - 3

Checking Password information through Windows PowerShell

How to Fix “Printer is in an error state” Issue?

The “ Cannot change fingerprint or PIN ” problem in Windows 11 happens when the options to change these settings are greyed out in Settings → Accounts → Sign-in options. Even if you are the administrator, you can’t update your Windows Hello credentials. You might also see a message like “ This option is temporarily unavailable. ”

Check Windows Last Password Change in CMD or PowerShell - 4

Can’t disable PIN or Fingerprint on Windows 11

This usually happens because Windows Hello’s stored data (in the Ngc folder) is damaged or not in sync. Other reasons include security rules set by your workplace or school, connected work accounts, or restrictions set in the registry or group policy.

Now that you’re aware of the potential causes, let’s go through some steps that have helped other users fix or work around this problem:

1. Change the PIN or Fingerprint the Conventional Way

If your goal is to remove the fingerprint or PIN without setting up another sign-in method, please note that this is not possible on Windows 11.

Windows 11 requires you to have at least one Sign-in option enabled. The Remove button will remain grayed out if you only have one active sign-in method.

Check Windows Last Password Change in CMD or PowerShell - 5

Can’t disable PIN or Fingerprint on Windows 11

For example, the Remove button for your PIN will stay unavailable until you add a different sign-in option (like Facial Recognition, Fingerprint, or a Security Key).

If you want to stop using your PIN or Fingerprint, you’ll need to set up an additional way to sign in.

Below are step-by-step instructions to set up a new sign-in option and then remove your current one:

  1. Press Windows key + I to open the Settings menu in Windows 11.
  2. Inside the Settings menu, click on Accounts from the vertical menu on the left. Accessing the Accounts menu Note: If the left menu is hidden by default, click the menu button (top-left corner) to reveal it.
  3. Once in the Accounts menu, move to the right-hand section of the screen and select Sign-in options. Accessing the Sign In Options menu
  4. Now, choose which sign-in method you’d like to set as a fallback. Sign-in Options Note: Your available options depend on your device. If your PC doesn’t support facial recognition or you don’t have a security key, you can switch between PIN and fingerprint.
  5. After you pick your new sign-in method, follow the on-screen instructions to set it up.
  6. Once your second sign-in option is set, you’ll be able to click the Remove button to get rid of your previous sign-in method. You can also choose Change PIN or Change Fingerprint to update, rather than remove, your sign-in credentials. Modify the current PIN or remove one of the configured sign-in options

2. Remove PIN or Fingerprint Requirement by Using a Local Account

If you want to completely remove all sign-in options like PIN or Fingerprint, you will have to switch to a local account .

We generally don’t recommend this unless you really need to, as it can limit the functionality of some built-in Windows features (like Windows Update and the Microsoft Store).

If you still want to remove your PIN or Fingerprint sign-in, you’ll need to set up a local account with a password instead. Keep in mind, this means you’ll need to stop using your Microsoft account on your PC.

Important: This method isn’t available if you’re enrolled in the Windows Insider program.

To change from a Microsoft account with PIN or fingerprint to a local password, follow these steps:

  1. Press Windows + I to open the Settings menu in Windows 11.
  2. In the Settings menu, click on Accounts from the menu on the left. Accessing the Accounts menu Note: If you don’t see the left menu, click the menu icon (top-left corner).
  3. Inside Accounts , click on Family & other users on the right-hand side. Accessing the Family and other users tab
  4. In the Family & other users tab, check for any accounts listed under Other users. If you find any, remove them before moving on.
  5. Next, return to the main Accounts menu and click on Your info on the right. Accessing the Your Info tab
  6. Scroll down to Account Settings and click on Sign in with a local account instead . Sign in with a local account instead
  7. On the next screen, click Next .
  8. When prompted, enter your current PIN or use your fingerprint as requested. Inserting the PIN
  9. Then, you’ll be asked to create a username and password for your new local account, along with a password hint in case you forget. Configure the local account
  10. Finally, click Sign out and finish to complete the switch.