Any command line tool checking windows domain password?

As from the question-comments you have access to the Active Directory. Go to Active Directory Management Console and right-click -> Find. Do a "Customer Search" and enter in the "Advanced Tab"

(&(objectClass=person)(objectClass=User)(pwdLastSet<=0))

This will give you all Accounts from the whole Directory that never changed their initaial set passwords.i

Benefit from the tip here https://stackoverflow.com/a/4601056 , I managed to use Python to do that.

import win32security
lg = win32security.LogonUser('username', 'domainname', 'password', win32security.LOGON32_LOGON_NETWORK,win32security.LOGON32_PROVIDER_DEFAULT)

If no exception occurs in win32security.LogonUser(), then the password is correct.

Requirement:

• Python 2.7.
• pywin32 package
• the client machine(the one running Python program) has joined to the domain.
• [to verify]Group policy on the client machine allow arbitrary domain user to logon locally.