Office 365 ADFS/Password Reset question

[Jake-ST]

We currently have both Staff and Student users on O365 with ADFS dealing with logins. There is a merger with another college on the books and we are planning to migrate there emails/files to O365 before any links or domain trusts get put in place.

 

The big problem with doing this is we have a 60day password policy for staff and 120day password policy for students. When the new campus comes on board they will have to in theory come all the way to my campus and reset there passwords.

 

I guess the question i'm asking is does anybody know or can recommend an AD password reset tool that can be published externally? Maybe asking security questions based on values in there AD account or a different DB.

 

Cheers

 

J

[nadeem]

We're just about to start using Nervepoint (there is a free version too) that lets you do this (and preload the answers to the questions to)

[Jake-ST]

Thanks Nadeem i'll take a look. Would be interested to find out how your getting on with it.

 

Cheers

 

J

[FN-GM]

@Jake-ST ADFS 3.0 on Server 2012 R2 will allow you to reset expired passwords from non workplace-joined devices over the internet. You need to make sure the server has KB3045711 installed. When it has this update run these commands in powershell.

 

Enable-AdfsEndpoint "/adfs/portal/updatepassword/"
Set-AdfsEndpoint "/adfs/portal/updatepassword/" -Proxy:$true
Restart-Service AdfsSrv -Force