Student Password Resets

[kyle141]

Hi

 

I'm looking for a way teachers can reset students passwords.

Does anyone know of any software that would do this ?

Preferably free or low cost

 

Thanks

[Olliedawg]

Free? : RSAT with delegated permissions to explicitly only allow password resets on the student OU?

 

Paid : We use Senso classroom management which has a password change feature, which is what our staff use.

[localzuk]

Do you use Azure/Entra ID at all? Ie. do you use Office 365? If so, there's tooling built in. We use this across our schools, with delegated members of staff able to change passwords for children in only their school on our 365 tenant.

 

https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/my-staff-configure

[Jcx500]

https://www.burconix.com/software/download-change-password

[timbo343]

https://www.burconix.com/software/download-change-password

Could this be used along side Delegate Control settings so instead of giving those that need the AD MMC addin, you give them this tool so that can only change those users configured against Delegate Control?

[Jcx500]

Could this be used along side Delegate Control settings so instead of giving those that need the AD MMC addin, you give them this tool so that can only change those users configured against Delegate Control?

 

From Memory, yes staff could only reset student passwords

[rob_coles]

https://wisedataman.com/password-control

[illySRSCMAT]

From ChatGPT: "Yes, it's possible to delegate password management rights using Active Directory. You can grant the "Reset Password" permission to the teachers' group on the students' group, allowing them to change passwords without granting other admin privileges. This delegation can be managed through Active Directory's Access Control Lists (ACLs) or using Group Policy settings".

 

So if you have an AD network environment, create a Security Group with those permissions, or add permissions to an existing group, put all the teachers/whoever in that group and they should be able to change passwords for students and nothing else.

[gwendes]

https://wisedataman.com/password-control

 

This says it wants .net 2.0 and my computer refuses to install it. Any ideas?

 

Is there an easier way now, we used to use this software with the IT teachers but seems like it's become a pain to install.

[CHiLL]

Many years ago, a colleague created a basic GUI using Visual Basic to reset student passwords, show their username, email address and a button to open their Home folder. At some point, the programme stopped working (which later turned out to be permissions, specifically staff for some reason no longer had the permission to reset passwords on the OU) and I don't know Visual Basic. Instead, with the (considerable) aid from ChatGPT, I created a PowerShell script that I then used PS2EXE to have it as an executable.

 

[ATTACH]72922[/ATTACH]

 

I don't know if it would be useful to anyone, so I've attached it to this post as a TXT file and removed some of our domain information. I believe the only steps someone would need to do in order to get this to work is change the extension back to .ps1, amend the script to match your domain/OU structure, change the password to whatever you want it to be and then use PS2EXE to convert it to an executable.

 

Note I: This only works for on-premise AD servers.

 

Note II: I don't actually use this version at the moment, since I managed to get the original Visual Basic version working via permissions and that's the application staff are used to. However, it did work when I last tried it some months ago.

 

Note III: PowerShell isn't a strong suit of mine, so please don't chastise me where there could have been some improvements or there's a better way to achieve it!

Edited January 15, 2025 by CHiLL

[dhicks]

Is there an easier way now, we used to use this software with the IT teachers but seems like it's become a pain to install.

 

My password changer utility:

 

https://github.com/dhicks6345789/password-changer

 

Web-based, runs as a Python (Flask) server, so should work anywhere you can run Python. Written (and tested) on a Windows server, using a Cloudflare Tunnel to handle SSH, and using Google OAuth to handle logins. Should be modifiable to use Microsoft / other OAuth, and the install script for Linux needs finishing off. The list of users and groups are stored as simple CSV files for easy export from whatever MIS you use, you can assign some / all teachers to have permissions to change pupil passwords, and pupils can use it to change their own passwords. Includes a "generate new password" button in the user interface for those users who have trouble thinking up a password.

[gwendes]

My password changer utility:

 

https://github.com/dhicks6345789/password-changer

 

Web-based, runs as a Python (Flask) server, so should work anywhere you can run Python. Written (and tested) on a Windows server, using a Cloudflare Tunnel to handle SSH, and using Google OAuth to handle logins. Should be modifiable to use Microsoft / other OAuth, and the install script for Linux needs finishing off. The list of users and groups are stored as simple CSV files for easy export from whatever MIS you use, you can assign some / all teachers to have permissions to change pupil passwords, and pupils can use it to change their own passwords. Includes a "generate new password" button in the user interface for those users who have trouble thinking up a password.

 

Is this for Gmail or Windows?

[dhicks]

Is this for Gmail or Windows?

 

Yes :-) Both, and / or others - it's a Python application, you can have the "setPassword" function run any code you like. For Google Workspace (i.e. GMail) you would probably have GAM installed and run a command line to change the given user's password, you would probably do something similar to change a local Windows AD / Entra ID password.

[gwendes]

For anyone finding this thread, I've ended up using this neat little application from Burconix: https://wiki.burconix.com/BCX_Change_Password

Runs from the network so I've just stuck a copy in the Staff Common drive and delegated rights are from an AD Security Group.

Love it when there's a way that just works without any faff.

[neonetman]

+1 for Burconix.

[Olliedawg]

For anyone finding this thread, I've ended up using this neat little application from Burconix: https://wiki.burconix.com/BCX_Change_Password

Runs from the network so I've just stuck a copy in the Staff Common drive and delegated rights are from an AD Security Group.

Love it when there's a way that just works without any faff.

 

That looks good for a free app!

[Space_Munkey]

+1 for BCX, we've been using it for almost 10 years!