password-in-description-filed

Sometimes, account password can be found in user account Description or notes fields

Get-DomainUser * | Select-Object samaccountname,description |Where-Object {$_.Description -ne $null}