Jump to content

Recommended Posts

Posted (edited)

I've attached a copy of mine (why the hell not :p). Read the readme.txt for any advice. It currently allows any users to run the tool but could be changed to allow things like Staff security group etc (although these aren't universal so harder to change)

 

Let me know what you think.

 

Obviously if giving to staff, load the program up and login as a domain admin to set the OU they can manage, then thats it, they can run it set to that OU from then on

Student Account Admin.zip

Edited by MK-2
  • Thanks 1
Posted
Hi,

Working well for me. One question. Is it possible to edit the settings so when a user logs in for the first time they have to change their password?

 

Who is that aimed at? :)

Posted
Who is that aimed at? :)

 

Anyone who knows the answer :)

I like the idea of a pre-set value to set the password as, but for security I would like users to be prompted to change the password as they log in otherwise you could end up in the situation where students know each other’s password and start messing around with others account.

.

Posted
Anyone who knows the answer :)

I like the idea of a pre-set value to set the password as, but for security I would like users to be prompted to change the password as they log in otherwise you could end up in the situation where students know each other’s password and start messing around with others account.

.

 

Well for mine it resets the password to password and also sets the "change at next logon" value to on so it will prompt them the next time they log in with "password"

Posted
Well for mine it resets the password to password and also sets the "change at next logon" value to on so it will prompt them the next time they log in with "password"

 

Indeed, that's what mine is supposed to do.

Posted
bit of a worry tested as a staff member when i type in administrator in the username box and change password it changes there password even tho they cannot see the ou

 

on which prog, mine or localzuks?

if mine, did you select the OU first? and also who were you logged into the PC as? the reason i ask is the idea is you set the OU staff can see as an admin, it then stays set unless you change it

Posted
That's a little odd! I'll check it and see why its doing that. The code isn't exactly complex, it should only be connecting to the DC at the OU level specified.
Posted

Right, checked it over. It was due to a silly bit of coding on my behalf - the OU wasn't being passed, just the AD server.

 

Attached is a new version, with this fixed.

Posted
Right, checked it over. It was due to a silly bit of coding on my behalf - the OU wasn't being passed, just the AD server.

 

Attached is a new version, with this fixed.

 

thanks thats better , gettijng an exception error when trying change password tho is there something i need change ad side?

Posted
thanks thats better , gettijng an exception error when trying change password tho is there something i need change ad side?

 

I can't reproduce this. Does the user running it have delegated rights to change passwords, and to write to the properties userAccountControl and LockOutTime? (ie. have you given the group that you specify can use the software the rights to do this?)

Posted
I can't reproduce this. Does the user running it have delegated rights to change passwords, and to write to the properties userAccountControl and LockOutTime? (ie. have you given the group that you specify can use the software the rights to do this?)

 

i think i have i have given delegate controls to the group to change passwords? getting error:access denied still tho.. strange.. ill keep trying.

Posted
i think i have i have given delegate controls to the group to change passwords? getting error:access denied still tho.. strange.. ill keep trying.

 

You also need to delegate control of the 2 properties also - just the change password option won't do it. When I get a moment, I'll create a better help file.

Posted

@localzuk it's probably best i create another thread or something with my program, otherwise providing help for two different programs in one thread might get a bit confusing.

 

of course it also means i can start the smear compaign against you in my thread as you are now a rival company :p

Posted

Hi localzuk

 

I just installed your reset password program - its great thanks, my school likes it. however, one little problem.

 

when i choose a student from the dropdown list and click reset (but not if you just type in the username and click reset) it brings up the following error message:

 

"Error: A device attached to the system is not functioning"

 

The password is still changed, but the message that confirms this doesnt appear. do you know how to fix it? or what may be causing it?

 

Running a domain on 2008 r2, and running the program from 32 bit win 7 machines

 

Thanks

Nick

Posted

I've just done a bit of a rewrite, changing the code to use the newer ways of editing domain accounts, reduced the number of config lines by one (and altered one) etc...

 

If you swap to this one, please ensure you update the config file to use the full domain (and not the short domain as before).

Reset Password.zip

Posted
localzuk, I like your app. I am trying the latest version. I have set everything up as per the readme. But I just keep getting an error saying the server is not operational. Yet the previous version I used worked, well with an error. But it did reset the password. Just did not force change password at next logon. Any ideas?
Posted
localzuk, I like your app. I am trying the latest version. I have set everything up as per the readme. But I just keep getting an error saying the server is not operational. Yet the previous version I used worked, well with an error. But it did reset the password. Just did not force change password at next logon. Any ideas?

 

iv got the same trouble now

Posted

Ah, I totally messed that up then! Oops.

 

Ok, you need to add the ADServer value back in again i'm afraid - my testing version I had removed it, but this one has some of the older code still in use.

 

So, add a section like

 

            dc01
         

 

And try again.

  • 1 year later...
Posted
An updated version for anyone interested. I've finally got the 'Force password change on login' to work reliably. Turns out that Active Directory can and does ignore changes done in the way I was doing them for this one property, they instead went a different (read 'non standard') way with their own property instead of the normal ldap way of doing things.

BonsaiPassword.zip

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...