Configure the password expiration warning message
For
Active
Directory
users and user groups that use the PSO (Password Settings Object) method to set the maximum password age, you can configure to allow users' BlackBerry Work
apps to display a warning message when their Active
Directory
password is about to expire.
For information on displaying a warning message for users that use the GPO (Global Policy Object) method to set the maximum password age, see the
BlackBerry Work
administration content.- Make sure that you have the following information:
- Logon credentials for the service account that is used to authenticate to the domain controller.
- LDAP server name and port number. The LDAP server name must be one of the Domain Controllers.
- Verify that the service account has READ permissions to the "Password Settings Container". For instructions, see Add Read permission to the account used to authenticate to the LDAP server.
- Verify that administrators use the PSO method to set the maximum password age for the users.
- Verify that users in your environment are runningBlackBerry Work3.8 or later.
- Select the checkbox to allowBEMSto queryActive Directoryfor password expiry details for the users.
- In the field, type the name of the LDAP Server (for example, ldap.<DNS_domain_name>).
- In the field, enter the base DN for the LDAP search. If this entry is not set,BEMStries to find the base DN in the namingContexts attribute.
- ClickTestto test the connection to the LDAP server.
- ClickSave.