It is better you check the days for last password change and for sending the random password generated by the system, you can use GUID the best unique secure and random values, produced by Microsoft.
Follow here GUID[
^]
You can also have a windows service to be regularly called in time given to send mail for password update along with a random password.
Hope this helps
Thanks :)