Specops Password Notification reads the maximum password age configured in the Default Domain Policy or fine-grained password policy, and sends out customizable notifications to users whose password is about to expire. The polling times are configurable and enable you to send the expiration emails when they will be most effective.

The tool compares the pwdLastSet attribute in Active Directory with the maximum password age in the default domain policy, or fine-grained password policy, to send notification emails to users affected by a configured GPO.

Specops Password Notification is tied to a particular Group Policy Object (GPO). The GPO in question holds one configuration that contains one or several templates for notifications associated with the GPO. The template determines how long before password expiration the email notification gets sent, as well as what the content of the email notification should be. There can be multiple templates in the configuration.