Emailing Users Before Their Passwords Expire

 Executive Summary:

Microsoft Windows' interactive logon password expiration notification is useful, but it works only for users who are logging onto the Windows domain interactively by using a Windows client. To address this problem, the PwdNotify.js script uses the email address specified in Active Directory to email users who have passwords that will expire within a specified number of days. The JScript script also logs its activity to the Windows Application event log.

Nearly every Active Directory (AD) domain has the Maximum password age policy setting defined in the default domain policy (i.e., Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy). This policy setting defines the number of days that a password is valid. For example, if the Maximum password age policy setting is 90 days, passwords expire after 90 days. . . .