forum help 2

[mscallisto]

I can't seem to find a forum that will help me with the following:

I need to capture from my active directory, all users that are within two weeks of password expiration. We have a 90 day pwd policy.

I would like to send an e-mail to those users reminding them to change their password before it expires.

 

[porkchopexpress]

Could you not use Active Directory password policy to prompt them? If you enable this the default is to prompt them 14 days before it expires but you can change that.

windows settings - security settings - local policies - security options" the attribute you want is "Interactive Logon: Prompt user to change password before expiration

 

[tfg13]

I agree with porkchopexpress....An email is easily deleted, where as the "notification" from the policy really seems to "annoy" users, which usually gets them to change their password (pops up every time they log on).

 

[mscallisto]

Brilliant !

This will work very well for most of my users.

I have a handful of users that log-in to a customers domain but use an outlook account on one of my domains. I'll probably need to process these users manually.

Thanks again to both of you

sam