question

38490807 avatar image
0 Votes"
38490807 asked MarshalPilgreen-2804 published

email notification for ad password expiry

Dear Team,

We need to set up email notification for ad password expiration. all users should receive email notification when their passwords going to expire.

Please advise as how to set up this option in active directory windows server 2016.


Thank you
best regards

windows-serverwindows-active-directorywindows-server-2016
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

To follow-up, Please let us know if you have further query on this.
Please don’t forget to Accept the answer

0 Votes 0 ·

Hi,
I am checking to see if the problem has been resolved.
If there's anything you'd like to know, don't hesitate to ask.

Best Regards,

0 Votes 0 ·
learn2skills avatar image
0 Votes"
learn2skills answered

Hi @shihasshamsudheen-6893

Refer to the below URL's it may help your request.
1. How to Setup a Password Expiration Notification Email Solution
2. EMAIL USERS IF THEIR ACTIVE DIRECTORY PASSWORD IS SET TO EXPIRE SOON


If the Answer is helpful, please click Accept Answer and up-vote, this can be beneficial to other community members.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered MaheshJaiswal-9928 edited

Hi,
There are 2 way for the Notify Active Directory Users about Password Expiry
One: Email Notify Active Directory Users about Password Expiry using PowerShell
This way ,we need to deploy a script to trig the notify, more details you can refer to:
https://social.technet.microsoft.com/wiki/contents/articles/23313.notify-active-directory-users-about-password-expiry-using-powershell.aspx

Two: Inactive logon notify
Navigate to Computer Configuration → Windows Settings → Security Settings → Local Policies → Security Options.
Select the policy named as “Interactive Logon: Prompt user to change password before expiration”.
With this policy, whenever your Windows computer connects to the domain the warning logon message - “Your password will expire in 5 days. Do you want to change it now?” will appear on the screen if your password is nearing its expiration date. Click “Yes” if you want to change it now and “No” if you want to change it at another time.

Best Regards,

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

HI @FanFan-MSFT,


How to test this script if we want to send this email for single user for testing purpose and after that for all AD user.

what will be the "$DN =" value we have to use.

Can we use it as below

$DN = "CN=User Name, OU=Name ,DC=name ,DC=com"
Thanks in Advanced

0 Votes 0 ·
MaheshJaiswal-9928 avatar image
0 Votes"
MaheshJaiswal-9928 answered MarshalPilgreen-2804 published

error.png (40.1 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Add this to the beginning of the script and you should be good to go:

Import-Module ActiveDirectory

0 Votes 0 ·
Rinzs-2983 avatar image
0 Votes"
Rinzs-2983 answered

This is a feature in ActivePasswords, which in itself is a really small password complexity tool for AD. It comes with a utility to auto e-mail end users, ie 7, 3, 1 day before expiry date, customizable template e-mail. Try it out. Very affordable IMHO. https://wizardsoft.nl/products/activepasswords

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.