Hi,

Anyone know of a web based password reset util for win2003/ad ?

Basically want to be able to select users or groups (tutors) who can log on and access this webpage.

They can then put in the required username (or search for a user), and can reset the password/unlock the account for the user (students).

Regards,

Christian

 

we used http://www.netiq.com/products/spa/default.asp

but you may need DRA too..

Does it need to be web based? Would delegation of control suffice?

 

thanks dave - that product says "web-based interface to allow end users to manage their own Windows passwords. " Does it allow control for people to reset other passwords? i.e. staff resetting students etc?

no that is to hard to use apparantly, web only..

 

fookin retards...

It should be easy enough to write something but it would be a big security risk IMHO..

There must be something about though.. do you not have a helpdesk - sorry service desk!!

David

 

well i was hoping i can say use the delegate of permissions, so only accounts in an ou could be reset by the web interface etc...

plus the actually webpage would be resticted to certain users etc etc..

I would have thought, but my google seaches arent coming back with what I am after

 

anyone else?

 

We use a in-house written asp pages that can do that.. It is mostly used by the support teams to add users to groups for software distribution.

Unfortunately, the server that hosts the site is not under my control so I cannot see how they did it...

Did you not fancy writing some web pages to do that? There are various free ldap api's available...

A quick search brought this up. Didn't read it in much detail might point you in the right direction?

H

 

I can write something to do it christian, just dont have too much time at the moment, however if you enable integrated authentication in IIS it should be too much of a problem, gimme a few days at work and Ill see what I can come up with.

David

 

Take a look at Quest Active Roles - I beleive this product does exactly what you are after

...EDIT - may not be Active Roles but I am pretty sure Quest do a product that does what you are after.

 

As said, you can knock something up yourself very easily.

Query the AD, getting back a DirectoryEntry object, then invoke ChangePassword on it.
obj.Invoke("ChangePassword", new object [] {currentPassword, newPassword});

 

Oh and you might need to do obj.CommitChanges(); not sure.

 

cheers guys