Re: [IMail Forum] Change Password Feature

[Ives Stoddard]

Joe,   By sync, do you mean the ability to set an NT/AD password using the IMail password service?   Yes... generally not a good idea for this to have been allowed in the first place.  Your entire NT/AD security hinged on the security of IMail.  You could still have IMail use NT/AD for authentication (not external DB), but users would change their PW as they would normally through the standard password changing interface for their windows client (9x,XP,2k,etc.).   If you need people to be able to change a password from a web-page, I would look into 3rd-party products that provide PW setting services from the web or even write your own with .NET - very easy to do if the service is running on IIS with NT user auth (really should be using SSL here too).  Then simply add a link to it on your IMail HTTP template pages.  This would allow users to change their NT/AD password from the web.   If IMail to NT/AD auth is a performance issue, consider using a different auth mechanism combined with a 3rd party tool for password sync from Web / SQL to AD (start by calling Microsoft and ask for an MS solutions channel partner that can direct you to the correct products / vendors).   -ives     ----- Original Message ----- From: Joe Velardi To: [EMAIL PROTECTED] Sent: Tuesday, June 17, 2003 8:58 PM Subject: [IMail Forum] Change Password Feature hi, i have already discussed the 'Change Password' feature previously. http://www.mail-archive.com/[EMAIL PROTECTED]/msg66798.html our current version (v6.05) allows password synch with our current NT4 infrastructure. with our move towards W2003, we decided to look into IMail v8 but security restrictions in this version do not allow password synch with active directory. i was wondering if there is another method that would allow user to synch their passwords with AD ? IMail has a feature that allows you to use an external database. can this point to the AD database ? many thx.