Ja, to the PDC only AFAIK. The password last changed value can be had through ADSI so go ahead and try to pull it from various DCs.

If your users connect to various computers across a vast network after logon where said computers may be using different DCs, then your script may fall down.