title: How to retrieve Active Directory group policy maximum password age using LDAP
body: <p>I would like to retrieve the group policy regarding to passwords from the company Active Directory, but I cannot find any info, how to filter my search to find the attributes.</p>
  <p>At first I like to get the maximum password age, which should be the <code>msDS-MaximumPasswordAge</code> attribute.</p>
  <p>The search term I've been trying:</p>
  <pre><code>ldap_search($ldap, 'CN=Policies,CN=System,DC=company,DC=com', '(objectClass=*)', array('msDS-MaximumPasswordAge'));
  </code></pre>
  <p>This is the widest filter I've tried, but it returns no object where the count is not zero. Of course I replaced the DC name for the purpose of this example.</p>
  <p>Did I missed something? Should I search under a different container?</p>