You may wish to read this KB article: http://support.microsoft.com/kb/331834/ Change password functionality replaced with Active Server Pages
which provides a set of ASP pages (even though they still have the .htr extension) that implement the change password functionality, rather than relying on the ism.dll ISAPI extension. The use of ASP may help mitigate some of the concerns you have re the security of the IISAdmPwd vdir. Cheers Ken -- IIS Stuff: www.adOpenStatic.com/cs/blogs/ken/ : -----Original Message----- : From: [EMAIL PROTECTED] [mailto:ActiveDir- : [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] : Sent: Tuesday, 14 June 2005 6:20 AM : To: [email protected] : Subject: RE: [ActiveDir] Change password web interface : : iisadmpwd VD is one of the VDs that is ALWAYS neutered on any IIS server I : touch - as part of my "server hardening" procedure. htr is one of the : extensions that gets unmapped in any IIS installation I do. I have been : doing : this before IISLOCKDOWN and, luckily, before CodeRed I and II. : : Your experience may be different. I am just pointing out that this is not : a : secure way to do what you are doing. Roll your own solution. IISAMDPWD and : htr has been proven to be, shall we say, full of issues. : : : Sincerely, : : D�j� Ak�m�l�f�, MCSE+M MCSA+M MCP+I : Microsoft MVP - Directory Services : www.readymaids.com - we know IT : www.akomolafe.com : Do you now realize that Today is the Tomorrow you were worried about : Yesterday? -anon : : ________________________________ : : From: [EMAIL PROTECTED] on behalf of Douglas M. Long : Sent: Mon 6/13/2005 12:37 PM : To: [email protected] : Subject: RE: [ActiveDir] Change password web interface : : : : http://support.microsoft.com/default.aspx?scid=kb;en-us;297121 : : : : : : : : ________________________________ : : From: [EMAIL PROTECTED] : [mailto:[EMAIL PROTECTED] On Behalf Of Jacob Stabl : Sent: Monday, June 13, 2005 3:35 PM : To: [email protected] : Subject: [ActiveDir] Change password web interface : : : : I am looking for a way for employees to change their password at any time : over a web interface. Any scripts or free programs out there anyone could : suggest? : : -- : Jacob Stabl List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
