title: Determine the maximum password age in Active Directory
body: <p>I want to expire users' passwords on an individual basis in Microsoft Active directory at different times.</p>
  
  <p>I understand that each user within AD does not have it's own password expry time. Instead there is a <code>Maximum Password Age</code> associated with the domain, and a <code>LastPasswordSet</code> date associated with the user.</p>
  
  <p>I intend to set the <code>LastPasswordSet</code> to simulate the behavior of each user having an individual max password age.</p>
  
  <p>In order to do this, I need to know the <code>Maximum Password Age</code> associated with the domain. How to I determine this programmatically from .NET?</p>
  
  <p><strong>Edit: I see that <code>LastPasswordSet</code> is readonly, so my approach may have no merit.</strong></p>