[THIN] Re: OT: Changing NT password through an SSL website

  • From: "Sjolund, Dag" <Sjolund@xxxxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Thu, 11 Mar 2004 12:04:51 -0700

Maybe this could help as well?

http://www.bindview.com/Products/DirAdminMig/PasswordManagement/

Don't know the price....

-----Original Message-----
From: Jennifer Hooper [mailto:jennifer.hooper@xxxxxxxxxxxxx]=20
Sent: Thursday, March 11, 2004 10:00 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: OT: Changing NT password through an SSL website


There's a really good software package out there that does this kind of
thing.  This is really good for such environments.  It was called
Courion PasswordCourier. And I believe it even allows reset by
telephone.  It's secure, easy to use, and fairly inexpensive, especially
in an environment where we were resetting user passwords on a daily
basis (60% of administrative overhead).  Here's the link:
http://www.courion.com/products/pwc/index.asp?lid=3DPasswordCourier&lpos=3D=
o
rang
e_banner

Jennifer

-----Original Message-----
From: Evan Mann [mailto:emann@xxxxxxxxxxxxxxxxxxxxx]=20
Sent: Wednesday, March 10, 2004 4:05 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] OT: Changing NT password through an SSL website

Hoping someone has seen someone do this or know of a way to do this.

A large number of my users are not connected to the domain.  This makes
it difficult to enable GPO's for expiring passwords every 90 days
because their ONLY interaction with something that can talk to the
domain is via website that require auth (NT Auth).

What I ideally want is to be able to set the password age in the GPO and
every time they auth to the website, it will check to see if that
parameter has been met, and if so, prompt them to change their password,
and then let them into the website.

If this cannot be done, my next step would be to manually set the "user
must change password and net logon" field and have something that checks
against this field every time they try to auth to a website.

This would be done via SSL so there are no plain text passwords.  It
would obviously have to be some kind of applications/ISAPI/ASP/whatever
that runs as the actual auth, instead of relying on the IIS auth.  I'm
just not sure if something exists,or can be coded to do this.

********************************************************
This weeks sponsor Emergent Online.
Emergent OnLine is the leading server-based computing consulting
integration firm in the nation. Emergent OnLine delivers expert
consulting services you can depend on. http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode
use the below link: http://thin.net/citrixlist.cfm
********************************************************
This weeks sponsor Emergent Online.
Emergent OnLine is the leading server-based computing consulting
integration firm in the nation. Emergent OnLine delivers expert=20
consulting services you can depend on.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This weeks sponsor Emergent Online.
Emergent OnLine is the leading server-based computing consulting integration 
firm in the nation. Emergent OnLine delivers expert 
consulting services you can depend on.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: