Students forgetting passwords! Again!!

[Gatt]

Guys I have been working on a solution to allowing self reset of password. Basically when a user has access to the system they go to a webpage that grabs their login username they are then asked to answer 3 questions the results and their username are stored in a database.

 

When they forget their password they login using a reset password user who's shell is set to iexplore and the homepage is the reset password pages. They then type in their username and answer the 3 questions and if they answer them correctly is allows them to pick a new password.

 

Ben

 

 

but how do they access this if they can`t log-on???

 

This sentence may be your answer

 

When they forget their password they login using a reset password user

[webman]

When you say "logged in" does that exclude authenticated to an SSL page?

 

Integrated Windows authentication + IIS.

[Joedetic]

webman, any chance i could have a copy of the "classic" ASP code please?

[plexer]

Yup that would be the case. I have a reset password user who has iexplore set as it's shell with the reset webpage as the start page. This would also need to be restricted to that site only.

 

Alternatively you could just have a dedicated password reset station say in reception that runs the same thing so the students have to go and use it.

 

There are numerous 3rd part implementations of this but I wanted to do it for the crack and for free.

 

http://www.psynch.com/features/self-service-password-reset.html

http://www.proginet.com/products/securpass/roi_calculator.cfm

http://www.protocom.com/html/securelogin_self_service_password_reset.html

http://www.avatier.com/products/PasswordStation/

 

etc...

 

Ben

[eduabncs]

To get around the the 'giving password to all and sundry' problem how about the use two factor user autentication. RSA version is here. That might blow a few peoples budgets though!

[Richie1972]

We don't allow students to change their password, instead we give them a 4 digit number.

If they forget it, they can ask their teacher who can click on a link on the desktop to get to the IT Faults and Resources system. On there they can log in to the user accounts section to browse for the student's name and password.

Any requests to change a password must be made through the IT Network department - I got sick of certain staff members changing passwords and not noting it down on the spreadsheet that used to be used