Is it possible to have LEM monitor users' accounts in Active Directory for impending password expiration, then perhaps send a reminder email to them to change their password?
Unfortunately, the only events I know of that Windows generates to the Event Log are AFTER expiration, not before expiration -- if someone fails to log on due to password expired, it's noted in the event. It would be pretty handy if Windows added to the Logon event some kind of expiration warning and we could pick it up.
