You probably know this, but for some reason I only found out about it when someone showed it to me the other day. Anyway, in the interests of sharing….
A really quick way to find the domain password and account lockout policy is to run the following from a CMD prompt:
net accounts
The output looks like this:
One thing you should bear in mind is that the output doesn’t take into account any Fine Grained Password Policies that may apply to your account. In other words, it is simply the output of the password and account lockout policy set at the domain level (usually in the Default Domain Policy) and not the resultant set of policies.