Auslesen des Passwortablaufdatums und Mailbenachrichtigung

 
###############################################################################

function write-Eventlog([string]$uname)
{

  $text = "Das Kennwort für den Benutzer " + $uname + " wurde zur Änderung aktiviert."  

  $Eventlog = new-object System.Diagnostics.EventLog('Application')  
  $Eventlog.MachineName = "."  
  $Eventlog.Source = "Kennwort-Manager"  
  $Eventlog.WriteEntry($text)

}

function send-EMail([string]$uname, [string]$email, [int]$number)
{
  #Mailserver  
  $server = "192.168.1.20"  
  $from = " kennwort@hier.local"  
  $subject = "Ihr Domainen-Kennwort läuft demnächst ab!"  
  $template = "C:\powershell\password.html"  

  $body = get-Content $template
  $replace=[regex]"#TAGE#"  
  $body = $replace.Replace($body,$number,1)
  $replace=[regex]"#NAME#"  
  $body = $replace.Replace($body,$uname,1)

  [System.Net.Mail.MailMessage]$message = New-Object System.Net.Mail.MailMessage($from, $email, $subject, $body)
  $message.IsBodyHTML = $true

  if ($number -eq 1) {$message.Priority ="High"}  

  [System.Net.Mail.SmtpClient]$smtpclient = New-Object System.Net.Mail.SmtpClient($server)
  $smtpclient.Send($message)

}

### Begin Main

$days = "7"  
$container = "OU=Benutzer,DC=hier,DC=local"  
$query = "(&(objectclass=user)(useraccountcontrol=512))"  

for ($day = 0; $day -le $days; $day++)
{

   $user =""  
   $users = Get-ADUser -LdapFilter $query -SearchBase $container -SearchScope:Subtree | Where {$_.PasswordExpires.Date -eq ([datetime]::Now.Date.AddDays($day))}

    foreach ($user in $users)
     {
       if ($user -ne $null)
       {
        
           if ($day -eq 0)
           {
             write-Eventlog $user.Name
             set-aduser -identity $user.NTAccountName -UserMustChangePassword $true
           }
           else
           {
             send-EMail $user.Name $user.EMail $day
           }
       }
     }
}

### End Main