$CurrentDate = Get-Date
$Users = Get-ADUser -filter {Enabled -eq $True -and PasswordNeverExpires -eq $False} -Properties msDS-UserPasswordExpiryTimeComputed, PasswordLastSet, CannotChangePassword, extensionAttribute10
$fromEmail = 'fromuser@domain.com'
$fromPass = 'password'
$securePassword = ConvertTo-SecureString $fromPass -AsPlainText -Force
$emailcred = New-Object System.Management.Automation.PSCredential ($fromEmail, $securePassword)
$SMTPServer = 'smtp.office365.com'
$SMTPPort = '587'
$PasswordNotifyDays = 10
$emailBody = @"
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta content="en-us" http-equiv="Content-Language" />
<meta content="text/html; charset=utf-8" http-equiv="Content-Type" />
</head>
<body>
<p>MESSAGEHOLDER</p>
<p>Please change password at <a href="https://myapps.microsoft.com">https://myapps.microsoft.com</a>.</p>
</body>
</html>
"@
foreach($user in $users)
{
$userUPN = $user.DistinguishedName
$userName = $user.Name
$PasswordLastChanged = $user.PasswordLastSet
$PasswordExpired = [datetime]::FromFileTime($user."msDS-UserPasswordExpiryTimeComputed")
$PasswordTillExpired = ($PasswordExpired - $CurrentDate).Days
if($PasswordTillExpired -lt $PasswordNotifyDays)
{
if($PasswordTillExpired -lt 0)
{
$message = "User $userName ($($user.UserPrincipalName)) password is expired ($PasswordTillExpired days past change time). Last changed $PasswordLastChanged"
}
else
{
$message = "User $userName ($($user.UserPrincipalName)) password expires in $PasswordTillExpired days. Last changed $PasswordLastChanged"
}
Write-Output $message
$altemail = $user.extensionAttribute10
if($altemail -ne $null)
{
write-output " Alternate email found and message being sent to $altemail"
Send-MailMessage -To $altemail -From $fromEmail -Subject "Password Expiry Notification - $($user.UserPrincipalName)" -BodyAsHtml $emailBody.Replace("MESSAGEHOLDER",$message) `
-SmtpServer $SMTPServer -Port $SMTPPort -UseSsl -Credential $emailcred
}
}
}
