nspmDistribution Password Change

[michael_ballanco]

Hi all- I am trying to setup an email notification that sends out when a user resets their password. However, I don't want the email to send out when the users password is initially set during user creation. I am having difficulty doing this because the same event comes across the driver for each case, as seen below:

<modify cached-time="20080531202349.212Z" class-name="User" event-id="idm#20080531202345#1#2" qualified-src-dn="O=TestContainer\OU=Users13\CN=TstUser" src-dn="\IDVAULT\TestContainer\Users13\TstUser" src-entry-id="33399" timestamp="1242929231#4127">
<modify-attr attr-name="nspmDistributionPassword"><!-- content suppressed -->
</modify-attr>
</modify>

This is my policy so far:

<rule>
<description>Password Update Notification</description>
<comment xml:space="preserve">This is the email that will be sent when a user resets or changes their password.</comment>
<conditions>
<and>
<if-op-attr name="nspmDistributionPassword" op="changing"/>
<if-src-attr name="Internet EMail Address" op="available"/>
</and>
</conditions>
<actions>
<do-send-email-from-template notification-dn="Security\Default Notification Collection" template-dn="Security\Default Notification Collection\Password Update Successful">
<arg-string name="to">
<token-src-attr name="Internet EMail Address"/>
</arg-string>
</do-send-email-from-template>
</actions>
</rule>

Any suggestions to get this working? Thanks in advance!