Notify manager of contractor Active Directory user account expiry via email and notify the service desk of any incomplete user accounts.
I personally think that notifying employees/managers of accounts that are due to expire creates a better customer experience than that employee/contractor coming in one day and not being able to log in.
With this in mind I have created the below script that works in two parts by looking for the string Contractor in the EmployeeType attribute.
Part 1 is gathering all the direct reports for a manager and if the conditions are met they will receive one email with any employees whose accounts are due to expire in the next 30 days.
Part 2 Gathers all users who have the EmployeeType set but are missing details such as account expiry or manager.
The script below provides basic output to the console and if you uncomment the send mail section it will then send the email. I have only included very basic email output but you can wrap your own HTML email template around these to make them look much more professional.
Read more “Auditing: Notify Manager Of Contractor Account Expiry”