Do you store domain user passwords?

Question

Active Directory

Do you store AD user passwords?
If yes, why? If not, why not?

Answer 1

no, this is against security rules + there is a rotation of passwords, so they become obsolete. in practice, you should only have a temporary password when issuing an account to a new employee or in case of recovery. no need to store it

Answer 2

What for?
An ordinary domain user has nothing that he could hide from the admin with this password. And the program settings in his profile still need to be done in his presence.

Answer 3

It makes no sense to store user passwords somewhere, and even more so to generate them yourself.
Is there a policy in the system for the length and complexity of the pass, did the user forget the password? We put a random one and check the "require change" checkbox, the user logs in and changes the password within n minutes, has not logged in and has not changed, blocking the account at all.
How to deliver a temporary password to the user is already from the category of policies adopted in the organization.