Share via

Entra User graph endpoint shows lastPasswordChangeDateTime as 1601-01-01T00:00:00Z

Joe Mayer 0 Reputation points
2026-02-23T18:15:35.1866667+00:00

When querying the graph api endpoint for a user I see their lastPasswordChangeDateTime being reported as 1601-01-01T00:00:00Z which is the Microsoft epoch. What would this indicate? A

Background:

  • The Entra users likely was in AD on-premise as the graph api endpoint reports onPremisesDistinguishedName and other onPremise fields.
Microsoft Security | Microsoft Graph

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Danstan Onyango 3,996 Reputation points Microsoft Employee
    2026-03-04T13:11:25.15+00:00

    If the user was from onprem that explains it. I think the attribute 1601-01-01T00:00:00Z is typically shown when no actual data is stored in Entra for that field.
    If the password is updated for that user you will likely see the recent value.

    If the Entra Connect sync is still enabled, check that password synchronization is corectly setup. Also is this only one particvular user or more than one user?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.