Shulou(Shulou.com)06/01 Report--

The account security policy in the customer company is 90 days after the password expires, but some users are unable to log in to × × and other company applications due to travel or other reasons. Customers want to know how to use Microsoft's latest data center automation tool System Center Orchestrator to send email notifications in advance when users' passwords are about to expire.

To simplify this problem, we make the following restrictions:

All the user accounts that need to be operated are automatically checked by the Partners group every day. If the password of an account is found to expire within 10 days, an email will be automatically sent to the user and copied to the administrator.

Runbook prototype

To achieve the required functionality, you need to register and deploy the following orchestrator IP:

Active Directory IP: http://technet.microsoft.com/en-us/library/hh653474.aspxExchange IP: http://technet.microsoft.com/en-us/library/jj614570.aspx

The following is the runbook prototype that implements the above functions (each icon connected with the arrow is called Activity). You can see that the implementation of Orchestrator is very simple, completely graphical interface operation, easy to understand, and its execution process is completely visual, and we can monitor it in real time through a large screen:

Let's briefly explain the functions of each Activity:

Monitoring date / time: this Activity is used to ensure that runbook is run automatically every day

Get Group: this Activity is used to get the specified group name, which can be replaced by the group name in our production environment.

Get User: this Activity is used to obtain users who meet the criteria. Here, you can specify that the parameters are provided with the return value of the previous Activity.

L set date / time format: this Activity is used to get the expiration time of the user's password. You need the return value of the previous Activity to get the password setting time. Set the password expiration time to 80 days (90 days minus 10 days).

L comparison value: this Activity is used to compare the expiration time of a user's password with the current time.

L Create an Send E-mail: this Activity is used to send warning emails to this user and administrator

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.