RE: Getting the Notes certificate expiration dates... Emilio Penedo 7.Oct.05 09:53 AM a Web browser Toolkits All ReleasesWindows 2003, Windows 2000, Windows XP, Windows NT
You can check the expiration dates in the certlog.nsf, it contains multiple entries for each user ( one entry for each time it has been recertify).
I've found out that even though the users receive a pop-up windows with a warning that their user.id is about to expire (I believe more than 30 days in advance), they never pay attention to it until the user.id actually expires and they are not longer able to authenticate with the server.
A best practice I've done is to organize the expiration dates....I would list my entire users by last name and divided it by 11 ,January thru November ( I wouldn't like to expend the Holidays recertifying users), so let's say last names starting with A-B or C will be recertified in January, last names with D-E-F in February and so on and so forth , when I register a new user I don't accept the default expiration date of 2 years but I adjust the date to the according month (depending on the 1st letter of the user's last name). If you do so you can easily recertify users thru the Domino Administrator, remember if the user.id hasn't expired the user will not need to email his safe.id.