+ Post New Thread
Page 9 of 19 FirstFirst ... 5678910111213 ... LastLast
Results 121 to 135 of 274
EduGeek Self Service Password Reset Thread, Self Service Password Reset in Projects:; Ah. Ive set the SSPR_SERVER login to domain admin and it goes through fine. Odd. Just need to find the ...
  1. #121

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    16
    Ah.
    Ive set the SSPR_SERVER login to domain admin and it goes through fine. Odd.
    Just need to find the lowest login level i can give it for SSPR to still work.

  2. #122

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    16
    Hmm.
    The lowest its letting me give is account operator. Which is too high for my liking.
    Ive delegated control out to the SSPR objects for the pupil OUs. Still no luck.
    Odd really, as the staff group can do pupil passwords, but SSPR wont allow with the login set to Staff.

    Ideas?

  3. #123

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,320
    Thank Post
    681
    Thanked 1,651 Times in 1,472 Posts
    Rep Power
    426
    Must be something wrong with your delegation of password changing then?

    Presume you'd delegated it to staff.

    All though having a really long password for sspr_reset user and also the cred file is not readible means it's secure enough.

    Ben

  4. #124

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    16
    Which delegation options do i need to set, just to double check what im doing?

  5. #125

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,320
    Thank Post
    681
    Thanked 1,651 Times in 1,472 Posts
    Rep Power
    426
    If you've run the delegate authority wizard to delegate it to staff for say the students ou that should be ok.

    Ben

  6. #126

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    16
    Quote Originally Posted by plexer View Post
    If you've run the delegate authority wizard to delegate it to staff for say the students ou that should be ok.

    Ben
    I used the delegate wizard to give access to changing & reset passwords, along with account read info to all 3 SSPR objects.
    Still doesnt let it through.
    Very odd.

    For the time being, ive set it to an account operator and given it a very very long password.

    I take it that cred.ini cant be accessed by anyone in its default state?

    Thanks.

  7. #127

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,320
    Thank Post
    681
    Thanked 1,651 Times in 1,472 Posts
    Rep Power
    426
    Nope not unless they have admin rights and can access the c$ share on your server but in that event them accessing cred.ini is the last of your worries.

    Ben

  8. #128

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    16
    Fair enough.
    Im just trying to setup a webpage in IIS that'll act as a menu, one pointing to the SSPR reset, and another to the room booking system.
    But for the life of me i cant get it working.

    My plan is to have a kiosk user, with its only startup app being IE, pointed at that menu page.

  9. #129

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    16
    Am i missing something here?
    Setting the enviorment to iexplore.exe & c:\program files\internet explorer\ should only start internet explorer and nothing else on login should it not?
    At least it does on my NAS for my iTunes server...?

  10. #130

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,320
    Thank Post
    681
    Thanked 1,651 Times in 1,472 Posts
    Rep Power
    426
    Why would you want your students to be able to access your room booking?

    Not quite sure what you asking about with IE???

    Ben

  11. #131

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    16
    Quote Originally Posted by plexer View Post
    Why would you want your students to be able to access your room booking?

    Not quite sure what you asking about with IE???

    Ben
    On my NAS, if i set the enviroment to an app, it would load that app only on login for that user.
    I want to do the same for the kiosk machine.
    Ive set it in a GP/OU that has the proxies wrong, so all it can access is the internal servers.
    With the home page set at http://server/menu, that gives the kiosk machine two hyperlinks, one goes to server/reset and the other to server/booking.
    The booking one still requires one further login.

    All that i need to do is set it so only IE comes up when this kiosk username logs in. But what i did on the NAS isnt working. So im asuming i have to use some sort of generic \program files\etc path?

  12. #132

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    16
    Quote Originally Posted by plexer View Post
    Ah ok I use:

    "%systemdrive%\program files\internet explorer\iexplore.exe" -k http://servername/path_to_reset

    Ben
    Aint working.

    In program file name i have: iexplore.exe
    And in start in i have: %systemdrive%\program files\internet explorer\


  13. #133

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,320
    Thank Post
    681
    Thanked 1,651 Times in 1,472 Posts
    Rep Power
    426
    In group policy I created a GPO that only applies to my passwordreset user:

    In the GPO under custom user interface that line is specified so that it opens up that web page as the interface and nothing else.

    Ben

  14. #134

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    16
    Quote Originally Posted by plexer View Post
    In group policy I created a GPO that only applies to my passwordreset user:

    In the GPO under custom user interface that line is specified so that it opens up that web page as the interface and nothing else.

    Ben
    In the GPO?
    I cant recall a setting like that, where is it located?
    As at the moment, im just trawling through a new GPO, disabling practically everything.

  15. #135

    Join Date
    Nov 2007
    Posts
    554
    Thank Post
    3
    Thanked 3 Times in 3 Posts
    Rep Power
    16
    Found it.
    It works beautifully. .

    Thanks for all the help everyone. .

SHARE:
+ Post New Thread
Page 9 of 19 FirstFirst ... 5678910111213 ... LastLast

Similar Threads

  1. Password Reset form for ICT staff
    By Rozzer in forum Windows
    Replies: 21
    Last Post: 30th January 2013, 10:01 AM
  2. apc powerchute buisness ed reset password
    By russdev in forum Windows
    Replies: 7
    Last Post: 8th November 2011, 12:35 PM
  3. bulk password reset
    By Jonny_sims in forum Windows
    Replies: 10
    Last Post: 26th September 2011, 10:12 PM
  4. Cisco Switch Password Reset
    By FN-GM in forum Wireless Networks
    Replies: 6
    Last Post: 10th October 2007, 09:15 AM
  5. Need to reset a local account's password
    By timbo343 in forum Scripts
    Replies: 1
    Last Post: 21st September 2007, 01:16 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •