This is definitely something I've written a few times. I actually don't
have a stand alone ASP.NET page that does this, as I tend to write ASP.NET
apps that are a bit more "architected" and have stuff implemented in
different layers to help facilite reuse and testability, so the actual LDAP
code would be in a different DLL and the page would be a very thin facade.
However, the comple code samples from our book would make a nice foundation
for building a page to do this. We also cover the reasons why ADSI
SetPassword and ChangePassword can be so tricky to deal with in our book in
ch 10 (which is a free download from www.directoryprogramming.net). We also
have a "pure LDAP" approach in our book that successfully avoids most of
these problems, but it requires .NET 2.0 (hopefully not a big issue for most
people these days).
I agree that buying a program to do this seems a little crazy to me, but I'm
also a good developer, so a lot of things that seem easy to me might not be
easy to other people.
Joe K.
----- Original Message -----
From: joe
To: ActiveDir@mail.activedir.org
Sent: Friday, December 22, 2006 11:34 AM
Subject: RE: [ActiveDir] Delegate Password Resets
Good ol .NET. :)
Honestly you can probably throw a pretty simple ASP.NET app together to do
this. Doubt there is a reason to buy anything and then when it dorks up you
can fix on your own. JoeK probably has this code on a web site somewhere.
--
O'Reilly Active Directory Third Edition -
http://www.joeware.net/win/ad3e.htm
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A.
Sent: Friday, December 22, 2006 11:48 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Delegate Password Resets
We use a product called rDirectory and the Reset Password function has
suddenly sporatically stopped working throwing what appear to be .net
errors.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of WATSON, BEN
Sent: Friday, December 22, 2006 12:38 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Delegate Password Resets
In our case, I simply modified the security permissions on the OU containing
our user accounts to provide a granular delegation of rights so the members
of this security group can go into ADUC and unlock user accounts or
reset/change passwords only. I modified various read/write property rights
as well as reset password and change password rights.
Besides modifying ACLs, what other methods of delegating password reset
functions were you referring to?
From: [EMAIL PROTECTED] on behalf of Salandra, Justin A.
Sent: Thu 12/21/2006 6:24 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Delegate Password Resets
I wanted to find out from all of you what ways you have delegated password
reset functions to your helpdesks. We have a product that does this but it
is continually having problems and want to know if there are nay other ways.
Justin A. Salandra
MCSE Windows 2000 and 2003
Network and Technology Services Manager
Catholic Health Care System
646.505.3681
cell 917.455.0110
[EMAIL PROTECTED]
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
