PSPasswordExpiryNotifications - PowerShell module

Following PowerShell Module provides different approach to scheduling password notifications for expiring Active Directory based accounts. While most of the scripts require knowledge on HTML... this one is just one config file and a bit of tingling around with texts. Whether this is good or bad it's up to you to decide. I do plan to add an option to use external HTML template if there will be requests for that.

Links

• Short description for this project at (screenshots and all)
• Full Description (and a know-how) for this project

Updates

• 1.6.9 - 2020.09.10

  • Reverted types that caused single line emails

• 1.6.8 - 2020.09.09

  • Changed Get-ADGroupMember to Get-ADGroup property Member for Managers due to performance issues

• 1.6.7 - 2020.09.09

  • Fixed logging to file for status of sent emails
  • Added auto creation of logs directory if it's missing

• 1.6.6 - 2020.09.06

  • Added ability of template per rule

• 1.6.5 - 2020.09.06

  • Resolved issues with encoding, removed encoding setting due conflicts
    • Set by default to UTF-8 which should resolve weird chars
  • Added filtering by group
    • LimitGroup takes an array of DistinguishedNames - compares on eq (no wildcard)
  • Added filtering by OU
    • LimitOU takes an array of DistinguishedNames - compares with like so wildcard is supported
  • Added ability to define multiple rules within one run
  • Added ability to send Admins Report as Excel
    • ReportsAsExcel = $true
  • Added ability to hide Admins Report as HTML
    • ReportsAsHTML = $false
  • Added ability to send expiration emails to accounts that never expire:
    • PasswordNeverExpires = $true
    • PasswordNeverExpiresDays = 30

• 1.6.4 - 2020.02.17

  • Fixes to manager sent emails
  • Fixes to sending emails in some edge cases
  • More reports

• 1.6.1 - 2019.11.16

  • Some stuff was rewritten for faster processing
  • Package is now published without any dependencies
    • PSSharedGoods\PSWriteColor and other modules are used only as part of development
    • You can remove those modules if you don't use their other features as those needed functions are bundled in.
  • LimitScope added to Managers. It's possible now to send notifications to managers of users that are in a given group(s) only.
  • <<Image>> was added in earlier version as part of Template
  • EmailUseDefaultCredentials now available (couldn't get Emails to work on one of the servers). By default set to False, but can be set to True if you have issues to send email
  • Targets whole Forest, rather than just Domain. May add a feature to limit to only domain later on.

• 1.1 - 2019.10.19

  • New feature:
    • SendCountMaximum added - good for limiting test emails
    • DisableExpiredUsers section added

• 1.0 - 2019.05.22

  • New feature:
    • Adds UseAdditionalField (for example 'extensionAttribute13') - the way it works now is that if you define additional attribute it takes precedence in sending emails. To understand it, imagine yourself a situation where two users exists - [email protected] and [email protected]. One with mailbox, the other oen without or even with mailbox. You can put email in extensionAttribute13 [email protected] which will cause an overwrite of default email for [email protected] which will allow sending notifications that otherwise wouldn't reach user or would be lost. This also works great for scenarios with Azure AD where having 2 emails with same address is not possible.

• 0.7 - 2018.11.03

  • Small updates to email notification, ability to inline logo

• 0.6

  • Removed "hidden" accounts responsible for Trusts from report, added count of users to report details

• 0.5

  • Initial Release

Sample user report

Sample manager report

Sample admin report