You can write some custom code to look through AD and send out emails to
users whose passwords are expiring in X days or less than X days, but if
your users use OWA for email there is a notification that can be turned
on if the password is expiring soon. I prefer this method because it is
always on top of the inbox and doesn't harass users with an email every
day. It's worth checking out if all you off site users are using OWA.
Check out http://support.microsoft.com/default.aspx?scid=kb;en-us;327134
for more info. Also, beware that there are a few patches to IIS on an
Exchange server that may need to be installed to make this work
consistently.
Good luck,
Scott
-----Original Message-----
From: Evan Mann [mailto:emann (at) pinnaclefinancial (dot) com [email concealed]]
Sent: Thursday, October 28, 2004 8:21 PM
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Notifying users of password expiration via e-mail`
I have a large group of off domain users to contend with, which means
they cannot be notified at login time that their password will expire.
Has anyone used any programs, scripts, or otherwise that checks against
password age and notified users via e-mail that their password is going
to expire. I'm looking for something that is configurable in how
frequently it e-mails the users.
I would use this in combination with a password reset application I
already have.
This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message. Any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.
users whose passwords are expiring in X days or less than X days, but if
your users use OWA for email there is a notification that can be turned
on if the password is expiring soon. I prefer this method because it is
always on top of the inbox and doesn't harass users with an email every
day. It's worth checking out if all you off site users are using OWA.
Check out http://support.microsoft.com/default.aspx?scid=kb;en-us;327134
for more info. Also, beware that there are a few patches to IIS on an
Exchange server that may need to be installed to make this work
consistently.
Good luck,
Scott
-----Original Message-----
From: Evan Mann [mailto:emann (at) pinnaclefinancial (dot) com [email concealed]]
Sent: Thursday, October 28, 2004 8:21 PM
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Notifying users of password expiration via e-mail`
I have a large group of off domain users to contend with, which means
they cannot be notified at login time that their password will expire.
Has anyone used any programs, scripts, or otherwise that checks against
password age and notified users via e-mail that their password is going
to expire. I'm looking for something that is configurable in how
frequently it e-mails the users.
I would use this in combination with a password reset application I
already have.
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message. Any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
[ reply ]