# AD Password Expiry Notifier
# Run as scheduled task daily at 8 AM

Import-Module ActiveDirectory

$SmtpServer = "smtp.yourdomain.com"
$FromAddress = "it-notifications@yourdomain.com"
$WarningDays = @(7, 3, 1)
$MaxPasswordAge = (Get-ADDefaultDomainPasswordPolicy).MaxPasswordAge.Days

$Users = Get-ADUser -Filter {
    Enabled -eq $true -and 
    PasswordNeverExpires -eq $false
} -Properties Mail, PasswordLastSet, DisplayName

foreach ($User in $Users) {
    if (-not $User.Mail -or -not $User.PasswordLastSet) { continue }
    
    $ExpiryDate = $User.PasswordLastSet.AddDays($MaxPasswordAge)
    $DaysLeft = ($ExpiryDate - (Get-Date)).Days
    
    if ($DaysLeft -in $WarningDays) {
        $Subject = "⚠️ Your password expires in $DaysLeft day(s)"
        $Body = @"
Hi $($User.DisplayName),

Your network password will expire on $($ExpiryDate.ToString('dddd, MMMM dd, yyyy')).

To change it:
1. Press Ctrl + Alt + Delete
2. Click 'Change a password'
3. Enter your current password and choose a new one

If you're remote, connect to VPN first.

Questions? Contact the helpdesk.

- IT Team
"@
        
        Send-MailMessage -To $User.Mail -From $FromAddress `
            -Subject $Subject -Body $Body -SmtpServer $SmtpServer
        
        Write-Host "Notified: $($User.DisplayName) — $DaysLeft days left"
    }
}

Write-Host "Done. Password expiry check complete."

import subprocess
import sys

servers = [
    "SERVER-DC01",
    "SERVER-APP01", 
    "SERVER-FILE01",
    "SERVER-SQL01",
    "SERVER-WEB01",
    # Add your servers here
]

def check_pending_reboot(server):
    """Check if a Windows server has a pending reboot via registry key."""
    try:
        result = subprocess.run(
            ["reg", "query", f"\\\\{server}\\HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\RebootPending"],
            capture_output=True, text=True, timeout=10
        )
        return result.returncode == 0
    except (subprocess.TimeoutExpired, Exception) as e:
        return None  # Unreachable or error

def main():
    print("=" * 50)
    print("  SERVER REBOOT CHECK")
    print("=" * 50)
    
    needs_reboot = []
    unreachable = []
    clean = []
    
    for server in servers:
        status = check_pending_reboot(server)
        if status is True:
            needs_reboot.append(server)
            print(f"  ⚠️  {server} — REBOOT PENDING")
        elif status is False:
            clean.append(server)
            print(f"  ✅  {server} — Clean")
        else:
            unreachable.append(server)
            print(f"  ❌  {server} — Unreachable")
    
    print("\n" + "=" * 50)
    print(f"  Summary: {len(needs_reboot)} need reboot | {len(clean)} clean | {len(unreachable)} unreachable")
    print("=" * 50)

if __name__ == "__main__":
    main()