AD Account - Change/Reset Password

[karan_jhr]

Hi

We are using Windows Server 2012R2 and the biggest problem we have is the request for change password

Whats the best utility to use so that users can change their own password and can reset the password as well

 

We will allow the users to do it on intranet only

Please suggest some solutions

 

thanks

[RLR]

We set this up so staff and students can change their password via the web browser:

 

https://github.com/unosquare/passcore

[ADMaster]

+1 PassCore here too.

[fiza]

Why stops students changing other students passwords? Does it have some kind validation code?

[ADMaster]

You need to know the current password, and if they already know that it can be changed with the usual methods.

PassCore does not allow a reset only a change. We use it so users on chromebooks and offsite can change their passwords since GAFE is synced with AD.

[karan_jhr]

Is there a tool to reset and change both?

In most of the cases users forget the password so they cannot change it

Any way to do that?

We set this up so staff and students can change their password via the web browser:

 

https://github.com/unosquare/passcore

[RLR]

Is there a tool to reset and change both?

In most of the cases users forget the password so they cannot change it

Any way to do that?

 

That would be a huge security concern if they could change password without knowing their old password. You would have to setup something else up to verify who they are but I don't think Passcore can do this.

[ADMaster]

There are tools out there that will allow your users to register security questions to reset the password. I can't speak for any of them. The few free ones I found in the past had a user limit and / or needed an external email / phone. I think it would be a nightmare asking students to register an email / phone to get self service password reset.

Also if it is intranet only why not get something like Password control, or an custom MMC and delegate reset responsibility to managers / HOD etc.

[Guest MD5T]

We use a web page using aspx that teachers can access and change passwords

[fiza]

Free for upto 50 users. Worth a look https://www.manageengine.com/products/self-service-password/active-directory-change-password.html?cam=379706229&adgid=27276132549&kwd=%2Bad%20%2Bchange%20%2Bpassword&loc=1006798&gclid=CjwKEAjwvYPKBRCYr5GLgNCJ_jsSJABqwfw76RnFOz_iQA5BhsVvXPEIdriHrR-TKlQI9un1cP-QhRoCkrvw_wcB

[fiza]

Also https://www.dovestones.com/active-directory-password-reset/?gclid=CjwKEAjwvYPKBRCYr5GLgNCJ_jsSJABqwfw7vqsgLnPOk7yZzXfToAix1GXez80wrFCH1q1bf-rIvRoCpJTw_wcB

[HPlum78]

FIM/ MIM gives users the ability to change passwords based on answering questions to verify account ownership.