The Intelligent Integration Feature Pack (IIFP) from Microsoft will do the password sync. Free download.

 

http://www.microsoft.com/windowsserversystem/miis2003/downloads/default.mspx

 

Cheers,

 

jackson

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: Wednesday, November 23, 2005 10:20 AM
To: [email protected]
Subject: Re: [ActiveDir] Quest Migration manager(OT)

 

Thanks.

 

I'm pretty sure Quest can't do this. I'm not sure why it only goes one way for pw's or if there is anyway to enable 2-way sync just for certain attribs..

 

I don't think management wants to not expire passwords which is why i'm here bugging you guys :(

 

I guess using Identity Intergration Feature pack would be overkill as well....

 

 

Thanks again

 

On 11/23/05, Medeiros, Jose <[EMAIL PROTECTED]> wrote:

Hi Tom,

 

I know of no script that can do this. Why don't you just not expire the password in the source domain? The other option is to use a tool that will dump the passwords into a text file such a pwdump. However Joe may have a better solution.

Sincerely,
Jose Medeiros
ADP | National Account Services
ProBusiness Division | Information Services
925.737.7967 | 408-449-6621 CELL

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tom Kern
Sent: Wednesday, November 23, 2005 9:54 AM
To: activedirectory
Subject: [ActiveDir] Quest Migration manager(OT)

Hi all, I'm currently running the Quest DSA to sync 2 forests in one direction- source to target.

 

However our source forest contains Exchange and OWA access and will for a few months till this is complete.

 

The issue I'm running into is that a users's password will expire in the target domain and they will change it but since password dynch is only one way, it will never get updated on the source user object and when they try to log into my front end owa server, which is in the target domain, they get all confused.

 

My question is- is there a free(Script?) way to synch passwords in the other direction for OWA or some way through Quest that I don't know about?

 

Thanks.

Apologies for the OT

 

Reply via email to