User Password Reset

[phildyer]

Hi everyone,

 

I'm just wondering if anyone knows of any software (preferably free or reasonably priced) that would allow staff to reset pupil passwords? I've debated installing RSAT and giving staff delegation of control to the pupil OU in AD but I'm not comfortable with staff having access to AD. We have about 1200 pupils and I'D say about 30 of those struggle to remember their own name so I've got no chance with passwords.

 

Any help would be great.

 

Thanks

 

Phil

[Matt_Renato]

Not really used it myself, but I know some schools have used Password Control for this.

 

Password Control

[DavePa]

If you are using Impero you can use that to reset passwords. Not sure if other classroom management software has the same functionality though.

[Matt_Renato]

If you are using Impero you can use that to reset passwords. Not sure if other classroom management software has the same functionality though.

 

I think there were a few users having issues with that functionality in the latest build.

[nadeem]

Not really used it myself, but I know some schools have used Password Control for this.

 

Password Control

 

We've used this in the past - does the job well

[mattstevenson2005]

We use Biostore ID password manager and have a number of fingerprint scanners around school that users can use to scan their finger to reset their active directory password.

 

If you have cunninghams cashless catering you will more than likely already have Biostore biometrics and you will just need the add on module and scanners. Really really easy to use and has almost removed the need for us to reset passwords manually altogether, it also works with our mifare cards for staff to reset their passwords.

Edited April 22, 2016 by mattstevenson2005

[IGB]

If you are using Impero you can use that to reset passwords. Not sure if other classroom management software has the same functionality though.

 

Rather depends on the version as they have broken it in 5.2

[Garacesh]

We just install RSAT on the machines of the (very few) staff that can reset password and give them a pre-configured MMC shortcut, with permission to change passwords. Job's a good'n.

[IGB]

I have recently installed Password Reset for a couple of our users because their normal way of changing it was with Impero.

Password Reset works brilliantly, the only thing I would prefer would be a confirmation message that the password has been changed but as soon as our staff understand that there isn't one they are fine.

[chrispounds]

+1 for password control, works nicely

[phildyer]

Thanks for the replies, I've heard good things about Impero and Password Control. I'll definitely investigate further.

[Bev]

Can anyone tell me what groups / security I need to give a staff member in AD to allow Password control to work.

It works for administrators but I don't want to give administrator to teaching staff.

[LeMarchand]

Can anyone tell me what groups / security I need to give a staff member in AD to allow Password control to work.

It works for administrators but I don't want to give administrator to teaching staff.

 

I created a new group ("PasswordReset") and then added people to it. Then you can grant permissions to the group like so: https://community.spiceworks.com/how_to/1464-how-to-delegate-password-reset-permissions-for-your-it-staff

[RichCowell]

Hi everyone,

 

I'm just wondering if anyone knows of any software (preferably free or reasonably priced) that would allow staff to reset pupil passwords? I've debated installing RSAT and giving staff delegation of control to the pupil OU in AD but I'm not comfortable with staff having access to AD. We have about 1200 pupils and I'D say about 30 of those struggle to remember their own name so I've got no chance with passwords.

 

Any help would be great.

 

Thanks

 

Phil

 

I've done as you suggested in the past and it worked really well, key members of staff had access to it that way...

 

We now have that feature in Impero though, anyone with access to that feature can reset any password so long as it doesn't appear in security groups containing certain sensible works (i.e. admin / staff) so only student passwords can be reset.

[Garacesh]

I created a new group ("PasswordReset") and then added people to it. Then you can grant permissions to the group like so: https://community.spiceworks.com/how_to/1464-how-to-delegate-password-reset-permissions-for-your-it-staff

 

Yep, that's basically the same as we've done here. We install RSAT and activate AD Tools on the machines that need it (Which is mostly just the ICT classroom staff machines) and assign users to a group. A pre-made MMC Snap-in shows them the pupil user OU's and they can just right click, reset password.

[Bev]

I've tried following the instructions on the Spiceworks link but they still don't have access. If I put them in the Administrators group, then it works perfectly, so it's definitely permissions related, but obviously making them administrators isn't a viable solution.

[Liam]

Just delegate permission to staff?

[Bev]

Just delegate permission to staff?

 

That's what I'm trying to do. I have followed these instructions.

 

Password Control - Delegating Permissions

[LeMarchand]

That's what I'm trying to do. I have followed these instructions.

 

Password Control - Delegating Permissions

 

I knew they had it on the Wisesoft site somewhere! That's the software we use. By "we" I mean the facility was requested, but is never used... Anyway, if I get time tomorrow I'll take a look - got quite a lot on, though.

[Liam]

Yup bags exactly what I did.. I use the same version and monitored it last year via impero.. Staff hammered it.. Maybe becuase my new approach is... If you have forgot your password , then what would you do if I forgot my password?

[LeMarchand]

That's what I'm trying to do. I have followed these instructions.

 

Password Control - Delegating Permissions

 

Quick thought before I get on with what I should be doing: do the relevant users have read/write permissions to wherever you're running the program from?

[HPlum78]

if you run Exchange, create a mailbox (set to allow staff only mail to it) use PowerShell to monitor the mailbox. Get your staff to send a mail to said mailbox with the name of the student(s) in the cc part of outlook mail client (others are available) and get the PowerShell to reset the passwords of the users in the cc part and mail the teacher with the new passwords. No installing RSAT or other bits of software on clients, no delegation of rights this way you get a system that requires little training as its using an application that is well known, and adoption is fairly painless.

[pantscat]

That, @HPlum78, is a beautifully elegant solution.

 

I really like that idea.

[HPlum78]

No problem I am just trying to dig out the code, I am bogged down with meetings and go lives at the moment, but will try to get some starters for 10 posted as soon as.

[pantscat]

I'd appreciate that - thanks.