Title: Message
Roland,
 
Are you currently running the IMail password server service?  You could either tell your users to change their password using the password server.  An alternative is you can change all the email passwords (using the command-line tools to change passwords in batch) and have them access a different web-page to get / set their new password (this would require that you have another means of identifying  them, like an NT logon / pw, social security, CC / invoice #, etc.).
 
If you are using the password server, simply tell ALL users to change their password using the pw server (see IMail docs for details).  If you want to reduce the chance that rogue user will attempt to change other people's passwords, avoid sending him that notice and check access logs to see which IP he's loggin in from to see if he's logged in as other people from the same IP.
 
-ives
 
----- Original Message -----
Sent: Monday, June 23, 2003 1:27 PM
Subject: [IMail Forum] user password change

We have a problem where a user knows a lot of other users passwords and he has used this access to pretend to be these users. This is, of course, a MAJOR problem.
Is there any way I can globally change all of my users passwords or force them to change them themselves the next time they log on? We're using the IMail database to store the user info.
Any help anybody can give me on this is greatly appreciated.
 
Roland Sickenberger
MIS Manager
Hardware Specialty Co., Inc.
508-481-8622
 

Reply via email to