How to test the “Remind Users to Change Password” user enforcement rule (4224066)

The following process details how an administrator can test the “Remind Users to Change Password” user enforcement rule.

How the password expiry notification works:

1. When Password Manager runs the “Reminder to Change Password” scheduled task the following data is gathered.
   1. It looks at the password Last Set (pwdLastSet) attribute for each user.
   2. It finds the current date from the server
   3. It checks the relevant password policy for the “Maximum Password Age” value
   4. It also knows from the configuration of the “Remind Users to Change Password Enforcement Rule” how many days before a password is due to expire a reminder email should be sent out.
2. The following formula is used to make that determination.

if c-(b-a) =< d then an email is sent to the user.

This is a simple example since there are other permutations in determining how frequently a user receives a notification but it illustrates the basic concept.

To test notifications:

1. Create a new management policy for test purposes.
2. Create a couple of test users in their own Test OU. Make sure these users have an email account.
3. Determine the “Maximum Password Age” value from the password policy that gets applied to these users.
4. Scope the Test OU to the management policies user scope.
5. In the “Remind Users to Change Password” user enforcement rule change the value in the “Days before password expiration:” to the same value (or greater) as the “Maximum Password Age” value in the password policy.
6. Enable and save the enforcement rule.
7. Run the “Reminder to Change Password” scheduled task.
8. The users scoped to the Test OU should receive a reminder email.

If users do not receive an email:

1. Determine that the users are able to receive emails to their account.
2. Delete the data in the comment attribute for the test user(s) created. This will unregister the user(s) remove any evidence that a user may have received an email in the past.
3. Enable verbose logging.

PMAdmin | General Settings | Logging | Verbose Logs

1. Run the “Reminder to Change Password” scheduled task. The user does not need to be registered.
2. Open a support ticket and send all the Password Manager logs that were generated and the name of the test user(s).