Skip to content

Instantly share code, notes, and snippets.

@1951FDG

1951FDG/reset_account.ps1

Last active May 15, 2018 12:24
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save 1951FDG/a382914c5156b808b6429efb5b78ce2e to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save 1951FDG/a382914c5156b808b6429efb5b78ce2e to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. 1951FDG revised this gist May 14, 2018. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion reset_account.ps1
    View file
    Original file line number Diff line number Diff line change
    @@ -4,7 +4,7 @@
    ## Tested this script successfully on
    ## 1) Powershell v3
    ## 2) Windows 2012
    ## 3/
    ## 3) Email support
    ##
    #####################################

  2. 1951FDG revised this gist May 14, 2018. 1 changed file with 1 addition and 0 deletions.
    1 change: 1 addition & 0 deletions reset_account.ps1
    View file
    Original file line number Diff line number Diff line change
    @@ -4,6 +4,7 @@
    ## Tested this script successfully on
    ## 1) Powershell v3
    ## 2) Windows 2012
    ## 3/
    ##
    #####################################

  3. 1951FDG created this gist May 14, 2018.
    104 changes: 104 additions & 0 deletions reset_account.ps1
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,104 @@
    #####################################
    ## http://kunaludapi.blogspot.com
    ## Version: 1.2
    ## Tested this script successfully on
    ## 1) Powershell v3
    ## 2) Windows 2012
    ##
    #####################################

    [CmdletBinding()]
    Param()

    Begin {
    Clear-Host
    $DebugPreference = "SilentlyContinue"
    $VerbosePreference = "SilentlyContinue"
    #Check for Active Directory module
    if (-not (Import-Module activedirectory)) {
    Import-Module activedirectory
    }
    if ($PSCmdlet.MyInvocation.BoundParameters["Debug"].IsPresent)
    {
    $DebugPreference = "Continue"
    }
    if ($PSCmdlet.MyInvocation.BoundParameters["Verbose"].IsPresent)
    {
    $VerbosePreference = "Continue"
    }
    #Generate Random Password
    function Generate-Password {
    $alphabets = "abcdefghijklmnopqstuvwxyz1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ!@#$%^&*()"
    $char = for ($i = 0; $i -lt $alphabets.length; $i++) { $alphabets[$i] }
    for ($i = 1; $i -le 9; $i++)
    {
    $CharArray += Write-Output $(get-random $char)
    if ($i -eq 9) {} #write-output `n
    }
    $CharArray
    }
    #Get AD user account and validate it
    do {
    $SamAccountName = Read-Host "`nReset Password For AD Account"
    if ($SamAccountName -eq "") {
    Clear-Host
    Write-Host -Object "`nPlease type user logon name`n" -BackgroundColor Red
    continue
    }
    elseif ($(Get-ADUser -LDAPFilter "(sAMAccountName=$SamAccountName)" -searchbase "{SEARCHBASE}").SamAccountName -eq $SamAccountName) {
    $AccountToReset = Get-ADUser -Properties givenName, Surname, EmailAddress -LDAPFilter "(sAMAccountName=$SamAccountName)" -searchbase "{SEARCHBASE}"
    break
    }
    else {
    Clear-Host
    Write-Host -Object "`nTyped Account Name doesn't exists, Please try again`n" -BackgroundColor Red
    $Everything_is_fine = $false
    }
    }
    while ($SamAccountName -eq "" -or $Everything_is_fine -eq $false)
    }

    Process {
    $title = "Reset Password"
    $message = "Are you sure you want to reset the password?"
    $0 = New-Object System.Management.Automation.Host.ChoiceDescription "Choice &0", "Send password reset email"
    $1 = New-Object System.Management.Automation.Host.ChoiceDescription "Choice &1", "Reset password"
    $2 = New-Object System.Management.Automation.Host.ChoiceDescription "Choice &2", "Cancel"
    $options = [System.Management.Automation.Host.ChoiceDescription[]]($0, $1, $2)
    $result = $host.ui.PromptForChoice($title, $message, $options, 0)

    if ($result -eq 2)
    {
    Exit
    }
    #Reset password and unlock it
    $PlainText = Generate-Password
    $Password = ConvertTo-SecureString -AsPlainText $PlainText -Force
    $AccountToReset | Set-ADAccountPassword -Reset -NewPassword $Password
    #$AccountToReset | Unlock-ADAccount
    Write-Verbose "Password resetted to $PlainText"
    #One Time Information fillup
    if ($result -eq 0)
    {
    $msg = New-Object System.Net.Mail.MailMessage
    $msg.From = "{email_address}"
    $msg.To.Add($($AccountToReset.EmailAddress))
    $msg.Subject = "Password Reset Request for $($AccountToReset.givenName) $($AccountToReset.Surname)"
    $msg.Body = "New password is $PlainText"

    $client = New-Object System.Net.Mail.SmtpClient("", "")
    $client.UseDefaultCredentials = $false
    $client.Credentials = New-Object System.Net.NetworkCredential("{id}", "{password}")
    $client.Port = 587
    $client.Host = "email-smtp.eu-west-1.amazonaws.com"
    #$client.Host = "email-smtp.us-east-1.amazonaws.com"
    $client.EnableSSL = $true
    #Send Email
    $client.Send($msg)
    Write-Verbose "Password Reset Email Sent"
    }
    }

    End {
    Pause
    }