{"id":162,"date":"2017-03-27T19:02:41","date_gmt":"2017-03-27T19:02:41","guid":{"rendered":"https:\/\/woodslife.co.uk\/?p=162"},"modified":"2017-03-27T21:07:15","modified_gmt":"2017-03-27T21:07:15","slug":"powershell-script-setting-password","status":"publish","type":"post","link":"https:\/\/woodslife.co.uk\/?p=162","title":{"rendered":"Setting a password with powershell script, and emailing it to a recipient."},"content":{"rendered":"

This is a quick and dirty powershell script to generate a random complex password, and set the password for a specific user and email it to someone.<\/p>\n

Using this powershell script and task scheduler, it is possible to schedule a password change and then email that newly generated password to a specific user. The password generated is a complex password. The biggest disadvantage of this is that the password is emailed in an unencrypted form.<\/p>\n

<\/h4>\n

Pre-Requisites:<\/h4>\n

The only pre-requisite is that you have an SMTP available to you. (or you could just google for one<\/a>)<\/p>\n

 <\/p>\n

Making Changes:<\/h4>\n

The changes that need to be made are:<\/p>\n

$user = “username” needs to be set to the username of the user you want to change (we change the supply user password here)<\/p>\n

From = “sendingserver@youraddress” – Adding the sending name (i.e. who it is from) noreply@mydomain.com<\/p>\n

To = “recipiant@youraddress” – This was set to my own email address, more addresses can be added in this format “address1@domain”,”address2@domain” with no spaces.<\/p>\n

Smtpserver = “your.smtp.server” – This is the last change that you need to make. Set this to your SMTP relay server.<\/p>\n

 <\/p>\n

When each of these changes have been made that should be it. as long as the powershell script is run as an administrator then it will generate, set and email the password.<\/p>\n

Powershell Script:<\/h4>\n
# Reset Password and notify by e-mail.\r\n\r\n#Import AD Module \r\nImport-Module ActiveDirectory\r\n\r\n#Set User to be edited\r\n$User = \"username\"\r\n\r\n\r\n\r\n#Needed to generate random password \r\nadd-type -AssemblyName \"System.Web\" \r\n\r\n#Generates a 9 character password with a minimum of 2 special characters\r\n#see https:\/\/msdn.microsoft.com\/en-us\/library\/system.web.security.membership.generatepassword(v=vs.110).aspx for details.\r\n$Password=[System.Web.Security.Membership]::GeneratePassword(9,2)\r\n\r\n#Set Account password\r\nSet-ADAccountPassword $User -Reset -NewPassword (ConvertTo-SecureString -AsPlainText $Password -Force)\r\n\r\n$messageParameters = @{\r\nSubject = \"New Password for $User User.\" \r\nBody = \"\r\nThe password has been change for $User.  \r\nThe password is now $Password.\r\n\r\nThis is an automated process, Written by Karl woods.\r\n\r\nMy Signature went here.\r\n\"\r\nFrom = \"sendingserver@youraddress\" \r\nTo = \"recipiant@youraddress\"\r\nSmtpServer = \"your.smtp.server\"\r\n} \r\nSend-MailMessage @messageParameters<\/pre>\n
Setting the task to run on powershell on a schedule:<\/h4>\n
Save this as a powershell script, something like “changeuserpassword.ps1”<\/p>\n