Monday, September 03, 2012

Portal "change password" using IISADMPWD Windows 2003

Portal change password for user non desktop that connected to Active Directory only for Exchange Email, we can use a IISADMPWD. To create the IISADMPWD virtual directory, follow these steps:

In the internet Service Manager Microsoft Management Console (MMC), expand Web Sites, right click the Default Wed Site, and then select Virtual Directory.
When virtual Directory Creation Wizard starts, follow the instructions to create the Virtual directory with the alias IISADMPWD. Point the path to local %systemroot%\System32\Inetsrv\Iisadmpwd directory. For the access permissions allow both Read and Run Script privilages.

To set the PasswordChangeFlags value in the IIS metabase, do the following:
From command prompt browse to the C:\Inetpub\Adminscripts directory.
Type adsutil.vbs, and then press the ENTER key. If this is the first time that Adsutil.vbs has been run, you may get error messages stating that Csript is not registered. Follow the prompts and choose Yes to register Cscript.
Type adsutil.vbs set w3svc/1/PasswordChangeFlags [Value].

w3svc/1 represents the Default Web Site and [Value] can be set to one of the following options:
0 - SSL connection requred
1 - Password changing allowed on no-secure ports.
2 - Password changing disabled.
3 - Password changing disabled. (Undocumented)
4 - Advance notification of password expiration disabled.

Users should now be able to change their Local Account password by visiting:
http[s]://[server address]/iisadmpwd/aexp2.asp
Or their Domain Account password by visiting:
http[s]://[server address]//iisadmpwd/aexp2b.asp
Where "S" exists in an SSL connection and "server address" is either the host name or unique IP address of the server.

0 comments: