Dashing widgets for Active Directory

A list of about to expire passwords.

A list of about to expire passwords.

Here's a set of Dashing widgets that give us some visibility to users with expiring passwords. This should run as a scheduled job on a domain controller. It queries through PowerShell the users and their password expirations.

The three widgets created are:

expiring_users

A list of expiring users, defaulting to all users within the next 14 days

expired_users

All expired users

locked_users

All users who have locked out their accounts

For expiring_users and expired_users, the widget doesn't need to update very often, but if you want to use locked_users, you may want to have the scheduled job run more frequently so you can respond more quickly when a user locks themselves out.

Additionally, a fourth widget is made that is essentially a set of all three of those in one:

Looks like Brian reset his password in time, but not Patrick.

Looks like Brian reset his password in time, but not Patrick.

active_directory_users

This one then will turn to a yellow/warning status if there's an expired user, and red/critical if there is a locked out user.

 

Below is the PowerShell script. Then just add the list widget to your Dashing dashboard as desired.