AD Integrated Self Service Password Reset

[John Felstead]

Hi,
Can anyone tell me if there is a Microsoft product available which allows
user self service to change an Active Directory domain user account password.
There appear to be a number of third party applications but most require
software to be installed on a client PC. What I am trying to achive is for
users to access a website (possibly on the AD Box but most probably on a
seperate web server) whereby the user can enter various answers to pre
registered questions (such as date of birth, home post/Zip code, Mothers
Maiden Name etc) in order to change or reset their domain password. I am not
particularly interested in the password being e-mailed as most users have a
generic e-mail account. Ideally they should be able to retrieve or reset
their password immediately.
If there is no MS solution then I would consider an approved third party
system

[Joe Kaplan]

AD doesn't support this directly, but Microsoft ILM 2007 does. Here is some
info:

http://technet2.microsoft.com/ILM/en/library/7ff88984-0335-4366-9118-61cf1a27748c1033.mspx?mfr=true

Note that you have to buy ILM if you don't already have it, so it might not
be that much better for you from a $ perspective than some of the other
commercial offerings.

You can also build something like this yourself if you like. Reseting the
password isn't really very hard to do programmatically. The trick is
finding a reasonable alternate authentication mechanism for the users and
storing that data securely.

Joe K.
--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--

Post by John Felstead
Hi,
Can anyone tell me if there is a Microsoft product available which allows
user self service to change an Active Directory domain user account password.
There appear to be a number of third party applications but most require
software to be installed on a client PC. What I am trying to achive is for
users to access a website (possibly on the AD Box but most probably on a
seperate web server) whereby the user can enter various answers to pre
registered questions (such as date of birth, home post/Zip code, Mothers
Maiden Name etc) in order to change or reset their domain password. I am not
particularly interested in the password being e-mailed as most users have a
generic e-mail account. Ideally they should be able to retrieve or reset
their password immediately.
If there is no MS solution then I would consider an approved third party
system
--
Regards
John Felstead

[John Felstead]

Many thanks Joe,
This looks good and I will follow it up.
--
Regards

John Felstead

Post by Joe Kaplan
AD doesn't support this directly, but Microsoft ILM 2007 does. Here is some
http://technet2.microsoft.com/ILM/en/library/7ff88984-0335-4366-9118-61cf1a27748c1033.mspx?mfr=true
Note that you have to buy ILM if you don't already have it, so it might not
be that much better for you from a $ perspective than some of the other
commercial offerings.
You can also build something like this yourself if you like. Reseting the
password isn't really very hard to do programmatically. The trick is
finding a reasonable alternate authentication mechanism for the users and
storing that data securely.
Joe K.
--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--

Post by John Felstead
Hi,
Can anyone tell me if there is a Microsoft product available which allows
user self service to change an Active Directory domain user account password.
There appear to be a number of third party applications but most require
software to be installed on a client PC. What I am trying to achive is for
users to access a website (possibly on the AD Box but most probably on a
seperate web server) whereby the user can enter various answers to pre
registered questions (such as date of birth, home post/Zip code, Mothers
Maiden Name etc) in order to change or reset their domain password. I am not
particularly interested in the password being e-mailed as most users have a
generic e-mail account. Ideally they should be able to retrieve or reset
their password immediately.
If there is no MS solution then I would consider an approved third party
system
--
Regards
John Felstead

[Mike Mitchel]

In my organization we are using netwrix password manager program and it's
works just fine for us. We installed it once on a standalone server and no
client deployment is required. So now all of our employees are enrolled into
the system and if user forgot his password he can just use web based portal
to reset it by answering predefined questions.
Best wishes,
Mike Mitchel.

[John Felstead]

Many thanks for the info Mike. I can do a quick search on the Netwrix site
for more info but in your environment did it integrate with Active directory
or only at the PC level?
The soultion we need is at AD level. We currently use Citrix NFUSE on a web
portal to control environment log on for users to access an application. The
solution needs to change the domain password on the AD master.
--
Regards

John Felstead

Post by Mike Mitchel
In my organization we are using netwrix password manager program and it's
works just fine for us. We installed it once on a standalone server and no
client deployment is required. So now all of our employees are enrolled into
the system and if user forgot his password he can just use web based portal
to reset it by answering predefined questions.
Best wishes,
Mike Mitchel.

[r***@gmail.com]

Hi,

As far for the Microsoft Native tool is concerned there is no such tool available which allow you to reset the password on its own. There are different other tools available which allow you to do the same work at a time.

You can use Lepide Active Directory Self Service for the same. This tool allow you to update the password and name on there own, i.e a user can update there password on its own without disturbing the admin.

You can download the tool from the given link below.

http://www.lepide.com/active-directory-self-service.html

Hope it helps you.

Post by John Felstead
Hi,
Can anyone tell me if there is a Microsoft product available which allows
user self service to change an Active Directory domain user account password.
There appear to be a number of third party applications but most require
software to be installed on a client PC. What I am trying to achive is for
users to access a website (possibly on the AD Box but most probably on a
seperate web server) whereby the user can enter various answers to pre
registered questions (such as date of birth, home post/Zip code, Mothers
Maiden Name etc) in order to change or reset their domain password. I am not
particularly interested in the password being e-mailed as most users have a
generic e-mail account. Ideally they should be able to retrieve or reset
their password immediately.
If there is no MS solution then I would consider an approved third party
system
--
Regards
John Felstead

[j***@gmail.com]

For Self-service password reset software for Active Directory permit to reset forgotten passwords and unlock accounts through a web-based, self-service portal. An Active Directory self service software facilitates to user and administrator to handle any types issue like self-password reset, self-account unlock, and self-information update any types computer using web-browse. For more information : http://activedirectoryselfservice.blogspot.com/2013/06/active-directory-self-service.html

[m***@gmail.com]

Post by John Felstead
Hi,
Can anyone tell me if there is a Microsoft product available which allows
user self service to change an Active Directory domain user account password.
There appear to be a number of third party applications but most require
software to be installed on a client PC. What I am trying to achive is for
users to access a website (possibly on the AD Box but most probably on a
seperate web server) whereby the user can enter various answers to pre
registered questions (such as date of birth, home post/Zip code, Mothers
Maiden Name etc) in order to change or reset their domain password. I am not
particularly interested in the password being e-mailed as most users have a
generic e-mail account. Ideally they should be able to retrieve or reset
their password immediately.
If there is no MS solution then I would consider an approved third party
system
--
Regards
John Felstead

Kindly try AdSysNet Password Manager. The tool lets the users to reset, unlock and update profile on their own. All the user actions can be restricted by the Admin settings. The web interface lets the options to the users to reset their password. The tool costs very low price and it offers more features.

Visit http://www.adsysnet.com/password-manager.aspx for more details.