Hacker News Reader

I wrote a PowerShell script that does exactly this for Windows Domains.

In AD there is a MinPasswordAge policy that is typically set to 1 day to thwart exactly this type of work-around.