Password Notification Install Guide

Before you start

• Check the requirements.
• Install on a computer that stays on, such as a server. The service sends emails from this computer each day, and no one needs to be signed in.
• Have an account ready that can read Active Directory, or set up a managed service account after installing.
• Have your mail server or Microsoft 365 details ready.

No emails are sent until you turn them on in the last step.

Step 1 - Install

1. Download the installer.
2. Run the installer and follow the prompts.
3. Open Password Notification. It needs administrator rights, so approve the Windows prompt.

Step 2 - Connect to Active Directory

1. Click Active Directory in the sidebar.
2. Click Add domain.
3. Check the Domain name. It is filled in with this computer's domain.
4. Under Connect as, keep A specific account and enter the Username and Password.
5. Click Test connection.
6. Click Add domain.

The app now reads your accounts from Active Directory. This can take a few minutes on a large domain, and you can carry on with the next steps while it runs.

Step 3 - Set up email delivery

1. Click Email delivery in the sidebar.
2. Under Send using, choose Microsoft 365 or SMTP server.
   • Microsoft 365: enter the Tenant ID, Application (client) ID and Client secret.
   • SMTP server: enter the Server, Port, Username and Password, and choose whether to Use SSL/TLS.
3. Enter the From address and From name.
4. Click Save.
5. Click Send check email and confirm that the message arrives.

Step 4 - Review the message

1. Click Message in the sidebar.
2. Edit the Subject and Body, or keep the defaults.
3. Click Save.
4. Click Send test to see the email as a user would.

Step 5 - Choose recipients

1. Click Recipients in the sidebar.
2. Choose Everyone in the domain or Only selected people. Selected people is useful for a pilot group.
3. Under Never notify, add any accounts that should not receive emails, such as service accounts.
4. Click Save.

Step 6 - Turn on notifications

1. Click Schedule in the sidebar.
2. Set the daily run time. The default is 8:00 AM.
3. Choose how many days before expiry to send each warning. The default is one warning at 14 days.
4. Click Save.
5. Turn on Send email notifications.

If today's run time has already passed, the first emails go out within a minute. Only users with a warning due today are emailed.

Activate your license

Everything works for 30 days without a license. After that, emails pause until you activate one.

1. Click License in the sidebar.
2. Enter your license key from your purchase confirmation email.
3. Click Activate.

Use a managed service account

This configuration will set the service to run as a managed service account and requires no additional username or password to connect to Active Directory.

Step 1 - Create Managed Service Account

The app does not create the service account so you need to create and enable it first.

1. Run this command to create a managed service account. Change SERVICE-ACCOUNT-NAME to the name you want for example PwdNotifySvc.

New-ADServiceAccount -name "SERVICE-ACCOUNT-NAME" -RestrictToSingleComputer

2. Run this command to enable the service account on the computer. Change HOSTNAME to the name of the computer where Password Notification is installed.

Add-ADComputerServiceAccount -Identity "HOSTNAME" -ServiceAccount "SERVICE-ACCOUNT-NAME"

3. Run this command on the computer where Password Notification is installed.

Install-ADServiceAccount -Identity "SERVICE-ACCOUNT-NAME"

4. To test that the service account is installed correctly run this command on the computer. It should return True.

Test-ADServiceAccount -Identity "SERVICE-ACCOUNT-NAME"

Step 2 - Connect as the service account

1. Click Active Directory in the sidebar.
2. Click Add domain, or edit your existing domain.
3. Under Connect as, choose the managed service account option.
4. Click Test connection, then save.