Security Basics mailing list archives

Re: Active Directory password expiry notification via email??


From: Raoul Armfield <rarmfield () amnh org>
Date: Fri, 14 Jul 2006 09:35:12 -0400

Stephane Favre wrote:
Hi there

I was wondering whether there would be a way of letting users know via email
that their Active Directory password will be expiring in XX days. We have quite
a few users that connect to our network only to collect email via PDA's and
other mobile devices. So they seldom, if ever, actually log onto a windows
PC.... it would be nice to inform these users that they need to contact the
helpdeks the next day to reset their password, ect.

I don't think that there is a way to do this natively but you could write a script that compares todays date with the Users PasswordExpirationDate property. If today's date is within XX days of PasswordExpirationDate then the script can send an email to the user informing them that they have to change their password

--
Raoul Armfield
Support Specialist
IT-Call Center
rarmfield at amnh dot org
American Museum of Natural History
Central Park West at 79th Street
New York, New York 10024-5192
(212) 313-7258

7E01 141D 9D9B 40E9 4969
9644 00EB 6D79 03C2 B6AD

---------------------------------------------------------------------------
This list is sponsored by: SensePost

Hacking, like any art, will take years of dedicated study and practice to master. We can't teach you to hack. But we can teach you what we've learned so far. Our courses are honest, real, technical and practical. SensePost willl be at Black Hat Vegas in July. To see what we're about, visit us at:
http://www.sensepost.com/training.html
---------------------------------------------------------------------------


Current thread: