BonsaiPassword

(c) Bonsai Software/Tony Ayre 2011-2012

V1.1.0.5

Instructions

Place the .exe file and the .config file in a directory. Restrict access to the directory as you see fit.
Restrict access to the .config file so that only administrators can edit it, but that any permitted group
can read it.

The structure of your Active Directory must be with one OU containing a list of OUs within it with pupils within
them.
Eg.

AD ->
	Managed Users ->
				Pupils ->
						Year 5
						Year 6
						Year 7
						Year 8

So, the if your domain was Domain.Local, TopLevelOU mentioned below would be:

OU=Pupils,OU=Managed Users,DC=Domain,DC=Local

Set up a group in your Active Directory, and add anyone you wish to be able to reset passwords to that group.

Edit the .config file as follows:

Group - the name of the group you just set up.
Domain - the short name of the domain
TopLevelOU - the LDAP path to the OU that contains the OUs with pupils in.
ADServer - the address of the AD server you wish to work with (IP or DNS, but DNS must resolve).
Password - the password that pupil accounts will be reset to.

When you open the exe, it will check membership of the group, and then list the OUs in the TopLevelOU OU,
followed by listing pupil accounts when you then select one of those OUs.