Allowing Accounts with Expired Passwords to Change Passwords

Discussion in 'Active Directory' started by flash, May 15, 2007.

  1. flash

    flash Guest

    I logon locally to a machine and then use network places with a domain logon
    to get to files/etc. Since I do not receive a password expired message and
    am sometimes on the road when the password expires, how can I set the Active
    Directory settings to allow an expired password to be changed? WinXP client,
    Windows 2003 Server.
    A lot of our domain users are out of office and passwords expire - an admin
    nightmare. This is going to be a key issue when we deploy Portal Server and
    Exchange 2007 web access as well. I would like to tackle the domain account
    issue first.
     
    flash, May 15, 2007
    #1
    1. Advertisements

  2. flash

    Joe Kaplan Guest

    What people typically do is implement some sort of self-service password
    reset website and also possibly create an email-based password expiration
    notification system with a link to a password change website. Having both
    of these capabilities will help a lot.

    Unfortunately neither of these capabilities come with AD out of the box.

    Joe K.
     
    Joe Kaplan, May 15, 2007
    #2
    1. Advertisements

  3. flash

    flash Guest

    Where can I find information on creating this solution? Is this a vendor
    solution or self created solution? Recommendations on 3rd party as well as
    self created needed.
     
    flash, May 15, 2007
    #3
  4. flash

    Joe Kaplan Guest

    They are really two separate things that just happen to compliment each
    other well, especially if you have a considerable user population that might
    not log in with domain joined machines.

    In both cases you have the option of doing "build vs. buy". If you have
    some developers who know how to build directory-enabled applications, this
    might not be too bad for a build decision. If you don't, you'll likely be
    happier buying something that handles these things.

    As an experienced developer who has written a book about this kind of stuff,
    to me these both look like fairly easy "build" decisions, but my experience
    in the community leads me to know that these kinds of skills are not really
    common.

    Probably your best is to do some searches and find out what some of your
    options are for buying some add-on products and see if you can find
    something that works for you that way. Some other posters may be happy to
    recommend some products they like that do these types of functions.

    Joe K.
     
    Joe Kaplan, May 15, 2007
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.