Vbscript reset a single domain user's password

[ryan_powell]

Hi guys and gals. I'm sure that somewhere on this site is the solution i'm looking for but i've looked and can't find anything. Anyway...

As part of an updated Intranet system i am designing and administrative portal for carrying out simple domain user tasks without the need for the AD console.

The two things i wan't to do is:
>reset a single user's password - providing the script with the OU, username and new password.
>Enable or disable a users account (if required) - once again providing the script with the user's OU and username

if required our entire domain name is:

bramcote.www.bramcotepark.notts.sch.uk

Many Thanks - any questions ask away.

[mark]

What about this: http://www.edugeek.net/index.php?nam...&p=26384#26384

Irazmus/Plexar: - self service password reset

[Ric_]

@mark: I must have searched for 20mins trying to find that link!!!

[mark]

Yes - needs to go on ChrisH's home grown tools sticky

[ryan_powell]

Thanks for the responses. Just got back from a lovely time in Florida, but now back into the slog of web programming ready for when the little darlings start back on tuesday.

I've had a look at the files and scripts suggested, boy they're very complex but im reading through and picking bits up. Hopefully will have a working example ready one day if i ever get over the fear of accidentally resetting every password in the Domain / OU :silent:

Thanks

[plexer]

There's a configuration file with all the bits you need to alter to get self service password reset to work and that's about all you have to do apart from setting it up as a website.

If you have any specific issues let us know.

Ben

[webman]

Hi Ryan, I've got a similar thing on our Intranet. You also have a PM

[brightjdb]

This script is a great script for Public access computer that need to abide by CALEA laws. Basicly it is a Password of the day script. It will generate a password reset a specified user to that password and email a group or individual "The password of the Day" You either must run this on a system that has rights to change passwords or run with an account that does. Use task scheduler to run this at whatever time you would like.

================================================
================================================

Option Explicit
Dim objUser, objEmail
Dim strPassword
Dim intAccValue, strPwd1, strPwd2, strPwd3, StrPW

'Generate Password
strPwd1 = GeneratePassword("ABCDEFGHJKLMNPQRSTUVWXYZ", 3)
strPwd2 = GeneratePassword("abcdefghijkmnpqrstuvwxyz", 4)
strPwd3 = GeneratePassword("123456789", 1)

Function GeneratePassword(strCharacters, intLength)
Randomize
Dim strS, intI
For intI = 1 To intLength
strS = strS + Mid(strCharacters, Int(Rnd() * Len(strCharacters))+1, 1)
Next
GeneratePassword=strS

End Function

StrPW = strPwd1 & strPwd2 & strPwd3

'Set account to Reset

Set objUser = GetObject("LDAP://CN=USER,OU=USERS,DC=YOUR,DC=Domain")

'Set Account Attributes
intAccValue = 544

objUser.SetPassword(StrPW)
objUser.SetInfo

objUser.Put "userAccountControl", intAccValue
objUser.SetInfo

'Send email Settings are configured for NON-SMTP service computer

Set objEmail = CreateObject("CDO.Message")

objEmail.From = "test@test.com"
objEmail.To = "test@test.com"
objEmail.Subject = "Password of the Day"
objEmail.Textbody = "Todays password is " &StrPW&". "
objEmail.Configuration.Fields.Item _
("http://schemas.microsoft.com/cdo/configuration/sendusing") = 2
objEmail.Configuration.Fields.Item _
("http://schemas.microsoft.com/cdo/configuration/smtpserver") = _
"smtp.wcu.edu"
objEmail.Configuration.Fields.Item _
("http://schemas.microsoft.com/cdo/configuration/smtpserverport") = 25
objEmail.Configuration.Fields.Update
objEmail.Send

================================================== ===
================================================== ===

[mac_shinobi]

Was just about to suggest the password reset tool from WiseSoft - Resources for IT Professionals ( registration is free ) and once logged in you can easily download and install it and as long as the user(s) have delegated rights to reset passwords then it should work fine.

[maniac]

If your usernames meet the required pattern, you can use my easy password reset tool - there's no setting up to do, just needs .NET installed and the 'account manager' priviledge to be allocated to the user in Active Directory.

(Unfortunitely development has ground to a hault on account of the fact I managed to loose the source code!)

Easy Password Reset Software

Mike.