+ Post New Thread
Page 14 of 19 FirstFirst ... 4101112131415161718 ... LastLast
Results 196 to 210 of 274
EduGeek Self Service Password Reset Thread, Self Service Password Reset in Projects:; Hi Craig , I got those errors when I tried this tool on Member server. because of these errors I ...
  1. #196

    Join Date
    Feb 2009
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hi Craig ,

    I got those errors when I tried this tool on Member server. because of these errors I decided to use XP as OS.

    For errors regarding password reset :

    > Please make sure to assign appropritate permissions to IIS virtual directories
    > Loginadmin.dll is registered
    > User name entered in cred.ini having sufficient permissions to reset user accounts
    > Appropriate entries of domain FQDN in config.asp.



    Aksh

    For some unknow reasons my previous login is not working...hence using this new username !

  2. #197

    Join Date
    Mar 2009
    Location
    Denver
    Posts
    7
    Thank Post
    0
    Thanked 4 Times in 2 Posts
    Rep Power
    0

    Getting closer to solution

    I commented out the error check where the code is highligted on reset_pass.asp:
    Also commented out the Endif at bottom of coded If statement.



    'Connect to Active Directory, reset and expire password
    Set objLogon = Server.CreateObject("LoginAdmin.ImpersonateUser")
    objLogon.Logon ImpersonateUser, ImpersonateUserPass, FQDN

    Set oUser = GetObject("WinNT://" & FQDN & "/" & strusername & ",user")
    'If Err.number <> 0 Then
    ' PageContent(0) = "Error: Unable to bind to container"
    'Else

    .
    .
    .
    Set rsRegisterUser = Nothing
    Set adoCon = Nothing

    End If
    'End If


    And was able to do a password reset on a non-domain controller IIS server.

    So maybe it is just a problem with the error code checking.

    I was looking at the code all day, and I could not find anything wrong with the code.

    I'll work on this more tomorrow, as it is time for me to get off work.

  3. #198

    Join Date
    Mar 2009
    Location
    Denver
    Posts
    7
    Thank Post
    0
    Thanked 4 Times in 2 Posts
    Rep Power
    0

    Seems to be working on member IIS server

    I think I've gotten everything working on an IIS Server that is not a Domain Controller.

    reset_pass.asp

    In the function ResetPass, I added the line Err.Clear, to clear the Err value at beginning of the function.
    This clears any errors codes that Err might have been set to before running this function.
    The extra command is highlighted below:


    Function ResetPass
    'Begin Password Reset Code
    Dim usr, oUser, oFlags

    'Clear the Err holder
    Err.Clear
    'Connect to Active Directory, reset and expire password
    Set objLogon = Server.CreateObject("LoginAdmin.ImpersonateUser")
    objLogon.Logon ImpersonateUser, ImpersonateUserPass, FQDN
    Set oUser = GetObject("WinNT://" & FQDN & "/" & strusername & ",user")
    If Err.number <> 0 Then
    PageContent(0) = "Error: Unable to bind to container"
    Else
    oFlags = oUser.Get("UserFlags")
    .
    .

    I also updated my Adminreset.asp.
    Somebody else had mentioned the quotes for ("Newpassword") on page 10 of this forum, for which. It looks like it never got fixed on the downloadable version. I checked the svn version, and it has not been updated either. It's line 213 of Adminreset.asp.

    I'm going to do a little more testing on my Lab environment before going Live on our Corporate environment.

    Anyways, I think this is an awsome project, and should cut down on the Helpdesk calls on Monday morning.

  4. 2 Thanks to acraiger:

    badders (24th March 2009), plexer (24th March 2009)

  5. #199
    badders's Avatar
    Join Date
    Apr 2007
    Location
    Cumbria
    Posts
    175
    Thank Post
    44
    Thanked 11 Times in 10 Posts
    Rep Power
    22
    I was also getting the "Error: Unable to bind to container" message. After adding the Err.Clear line in reset_pass.asp as suggested by acraiger and editing the ("NewPassword") line in Adminreset.asp I also managed to get it working on a member server running IIS.

    Just need to test it a bit more before going live with it.

  6. #200

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,685
    Thank Post
    755
    Thanked 1,715 Times in 1,526 Posts
    Rep Power
    438
    Fantastic guys.

    Good work if you can let me know if that does indeed help.

    As I said I'll get my test env up and running again and try this out then I can update the downloadable code.

    Ben

  7. #201

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,685
    Thank Post
    755
    Thanked 1,715 Times in 1,526 Posts
    Rep Power
    438
    Ok I've made the changes that have been suggested can some try it out for me please?

    It's available from google code:

    http://sspr.googlecode.com/files/SSPR%202.2.2.zip

    Ben

  8. #202

    Join Date
    Mar 2009
    Location
    Denver
    Posts
    7
    Thank Post
    0
    Thanked 4 Times in 2 Posts
    Rep Power
    0

    LDAP

    Well,

    I got this program to work using LDAP for accessing Active Directory to change the password.
    The main reason for me doing this was so the user account I use for these operations did not have to be a Domain Admin. I can now just use a regular Domain User account, and just delegate the needed permissions via the OU that holds the user accounts, that you want to be able to reset with this tool.

    The persmissions I assigned to the user account for resetting passwords at the OU level:
    Change Password
    Reset Password
    Read/Write Account Restrictions
    Read pwdLastSet
    Write pwdLastSet
    Read lockoutTime
    Write lockoutTime


    I'm not sure if you need all these permissions, but these are the permissions that were used by similar commercial products I tested.

    I made quite a few additions to the resetpass fuction in the reset_pass.asp and adminreset.asp, and have attached the files with the additions I made. I also commented out some of the commands as they did not seem to be working with the LDAP commands.
    Below is the Code added at the beginning of the resetpass function. You have to enter your NetBiosName, but maybe this can be added to the config file which holds the other Global variables.

    ' Specify the NetBIOS name of the domain and the NT name of the user, Change NetBiosName to your NetBiosName.
    strNTName = "NetBiosName" & "\" & strusername

    ' Use the NameTranslate object to convert the NT user name to the
    ' Distinguished Name required for the LDAP provider.
    Set objTrans = CreateObject("NameTranslate")

    ' Initialize NameTranslate by locating the Global Catalog.
    objTrans.Init ADS_NAME_INITTYPE_GC, ""
    ' Use the Set method to specify the NT format of the object name.
    objTrans.Set ADS_NAME_TYPE_NT4, strNTName

    ' Use the Get method to retrieve the RPC 1779 Distinguished Name.
    strUserDN = objTrans.Get(ADS_NAME_TYPE_1779)



    'END OF CODE FOR LDAP to replace Getobject("WinNt:

    Then I commented out: 'Set objUser = GetObject("WinNT://" & FQDN & "/" & strusername & ",user") and replaced with:
    Set objUser = GetObject("LDAP://" & strUserDN)

    The force password reset no longer worked, so I replaced this command with:
    objUser.Put "PwdLastSet", 0

    The code probably needs a little cleaned up, as I did not remove any code, but instead just commented it out.

    I thinking I'm just ready to roll this out on our production network.
    Attached Files Attached Files

  9. 2 Thanks to acraiger:

    Irazmus (11th September 2009), plexer (31st March 2009)

  10. #203

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,685
    Thank Post
    755
    Thanked 1,715 Times in 1,526 Posts
    Rep Power
    438
    Awesome work when I can get hold of Irazmus I'll point him to this and see what we do with this, this way sounds more secure tbh not sure if it will break anything else.

    Ben

  11. #204

    Join Date
    Aug 2007
    Posts
    851
    Thank Post
    106
    Thanked 66 Times in 47 Posts
    Rep Power
    27
    This new release is now tested and working on our IIS server.

    I have also used a deligated normal account and this also works fine.

    Only one question, would it be possible that the "Change password when next logon" could be unchecked?
    I can see kids getting confused, just a thought

    Cheers all
    Last edited by burgemaster; 2nd April 2009 at 05:23 PM.

  12. #205

    Join Date
    Aug 2009
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks all of you. I search for this Self Services Password Reset so long.
    I want to ask you something: When i use yourserver/update/index.asp for register user, after that i can't login with another user. It remember the first user. how can i put a logout function after i update information.
    Thanks again .

  13. #206

    Join Date
    Aug 2007
    Posts
    851
    Thank Post
    106
    Thanked 66 Times in 47 Posts
    Rep Power
    27
    We have just gone live with this at our school

    it is working fine, BUT when a password is reset the account remains LOCKED OUT.

    Is there any way that you guys could add the code to UNLOCK the account on a password reset?

    Maybe add a button to unlock on the admin menu?

    OR, is this supposed to also unlock the account but i have permission problem on the designated account?

    Thanks in advance

  14. #207

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,685
    Thank Post
    755
    Thanked 1,715 Times in 1,526 Posts
    Rep Power
    438
    Ok will look into that we didn't encounter that problem because our password policy doesn't lock an account after invalid attempts.

    Ben

  15. #208

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,685
    Thank Post
    755
    Thanked 1,715 Times in 1,526 Posts
    Rep Power
    438
    Try this

    Change line 276

    From:

    Code:
    oUser.Put "PasswordExpired", CLng(1)
    To:

    Code:
    oUser.Put "IsAccountLocked", CLng(0)
    Ben

  16. #209

    Join Date
    Aug 2007
    Posts
    851
    Thank Post
    106
    Thanked 66 Times in 47 Posts
    Rep Power
    27
    Thanks for the quick reply,

    I have changed this in "reset_pass.asp", is that correct ?
    Not working unfortunetly

    Cheers
    Tim
    Last edited by burgemaster; 8th September 2009 at 01:51 PM.

  17. #210

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,685
    Thank Post
    755
    Thanked 1,715 Times in 1,526 Posts
    Rep Power
    438
    Yes that's the correct file.

    Ben



SHARE:
+ Post New Thread

Similar Threads

  1. apc powerchute buisness ed reset password
    By russdev in forum Windows
    Replies: 8
    Last Post: 16th December 2014, 06:59 PM
  2. Password Reset form for ICT staff
    By Rozzer in forum Windows
    Replies: 21
    Last Post: 30th January 2013, 11:01 AM
  3. bulk password reset
    By Jonny_sims in forum Windows
    Replies: 10
    Last Post: 26th September 2011, 11:12 PM
  4. Cisco Switch Password Reset
    By FN-GM in forum Wireless Networks
    Replies: 6
    Last Post: 10th October 2007, 10:15 AM
  5. Need to reset a local account's password
    By timbo343 in forum Scripts
    Replies: 1
    Last Post: 21st September 2007, 02:16 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •