Monitor AD Accounts About To Expire?

jspanitz

We are trying to automate the process of monitoring and alerting (Both admins and the end users) Active Directory accounts whose account expiration date is about to be reached.  We'd like to let them know about 30 days out and then again about 7 days out.  Once the account expires we'd like to let the manager and helpdesk know.

Has anyone created anything like this or is one in the works for Solarwinds?  I've found a few examples of vb and ps code but have no idea how to turn that into a working SAM script with alerts.

Heeeeeeeeelp Plz.

erica.gill

Hi Jspaintz,

If you have a script to do what you need you can build a script monitor "Settings->SAM Settings->Manage Templates->Create New Template". From here select to "Add Component Monitors" and choose "Windows Script Monitor" or "Windows PowerShell Monitor". Then you can just copy and past your script. http://www.solarwinds.com/NetPerfMon/SolarWinds/OrionAPMPHComponentTypesWindowsScript.htm has some good detail on this.

Alerting would then just be a standard alert for a component monitor, something like:

- Open "Alert Manager" ("Start->All Programs->SolarWinds Orion->Alerting, Reporting, and Mapping->Advanced Alert Manager")

- Configure Alerts

- New Alert / Or Create a copy of an existing Alert

- Enter a Name and Description for the Alert

- Enable the alert

- Decide how frequently you want to check the alert

- Trigger Condition

  Here at the very top is a drop down menu "Type of Property to Monitor", change this to "APM:Component Monitor"

- Add a simple condition

Example - NodeStatus is equal to Down

In this case you would likely want your trigger conditions to look something like

"Component Statistic is equal to <your statistics threshold value from the script>"

- Reset Condition

- Choose how you want the alert to reset

- Alert Suppression

- Suppress the alert if certain conditions are met

- Time of Day

- Do you only want the alert to trigger at certain times

- Trigger Actions

- What do you want the alert to do when it triggers eg Email, page

Also if you get a chance look at the Windows Server 2008 Domain Controller Security Template , it might cover some of what you need in terms of user/account management.

Hope it helps.