Change 2003 Domain Password over Internet (No outlook, no vpn)...

Is there a way short of using Outlook (rpc over http) or VPN to change
a users password via the internet?

IE: Perhaps a 3rd party web app which would allow this etc.

Thanks for any tips

Kerry
Sat Feb 17 12:35:57 CST 2007

That would be a bit of a security flaw don't you think? You have to be
authenticated somehow. There are several ways to do this, VPN, RDP, RWW, and
probably more. The key is you need to be authenticated to so it.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"markm75" <markm75c@msn.com> wrote in message
news:1171734466.836504.64240@j27g2000cwj.googlegroups.com...
> Is there a way short of using Outlook (rpc over http) or VPN to change
> a users password via the internet?
>
> IE: Perhaps a 3rd party web app which would allow this etc.
>
> Thanks for any tips
>

Unsettled
Sat Feb 17 15:09:06 CST 2007

Should not be a problem, but I'm not totally clear how outlook would
work. Here's one way:

1) send email with command in the subject to blah@blah.com
2) use procmail to write to file the command
3) retrieve it via whatever (FTP, SCP, etc) to the local windows machine
4) execute it

Cron the retrieval of the command from the mail server.

markm75 wrote:
> Is there a way short of using Outlook (rpc over http) or VPN to change
> a users password via the internet?
>
> IE: Perhaps a 3rd party web app which would allow this etc.
>
> Thanks for any tips
>

Ian
Sun Feb 18 10:02:03 CST 2007

I'm working on something of this kind, an applet to allow non-domainmembers
to change their passwords, but as you say there are security concerns that
need to be carefully checked-out. Since the intention is to use an encrypted
socket-link it could in principle work over the Internet, though that's not
its original purpose.

The existing options are basically to use SSH or VPN, and the computer must
be a full domainmember if you want to change the AD password.

jwgoerlich
Mon Feb 19 05:38:41 CST 2007

> Is there a way short of using Outlook (rpc over http) or VPN to change
> a users password via the internet?

You could create a web page to allow users to change passwords. Set it
up so that users connect via SSL, authenticate to the Active Directory
domain, and are presented with a web page that allows them to manage
their password (and maybe some other user attributes). Build the web
page with Asp.net 2.0 and have it process the changes on the domain.
This is possible (I've done it in Intranet situations with Asp.net
1.1).

The security concern is that the computer hosting the site could be
compromised. It makes an attractive target, right? After all, cracking
it could allow an attacker full access to user information. Having
this computer available on the Internet (even over a DMZ) is not a
good idea.

What is the reasoning for not using a VPN?

J Wolfgang Goerlich


Related Links:

Focus Changing Passwords over the Web ADSI helps you give users an
easy-to-use Web interface for changing their passwords
http://msdn2.microsoft.com/en-us/library/ms954412.aspx

How to use the System.DirectoryServices namespace in ASP.NET
http://support.microsoft.com/default.aspx?scid=kb;en-us;329986

Managing User Passwords
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/sds/sds/managing_user_passwords.asp

Martin
Mon Feb 19 06:59:54 CST 2007

Perhaps you could try IISADMPWD. For more information see
http://support.microsoft.com/kb/907271.

Regards

Martin Rublik

markm75 wrote:
> Is there a way short of using Outlook (rpc over http) or VPN to change
> a users password via the internet?
>
> IE: Perhaps a 3rd party web app which would allow this etc.
>
> Thanks for any tips
>

markm75
Tue Feb 20 15:10:18 CST 2007

On Feb 19, 7:59 am, Martin Rublik <martin.rub...@nospam.com> wrote:
> Perhaps you could try IISADMPWD. For more information seehttp://support.microsoft.com/kb/907271.
>
> Regards
>
> Martin Rublik
>
>
>
> markm75 wrote:
> > Is there a way short of using Outlook (rpc over http) or VPN to change
> > a users password via the internet?
>
> > IE: Perhaps a 3rd party web app which would allow this etc.
>
> > Thanks for any tips- Hide quoted text -
>
> - Show quoted text -

Thanks for the IISADMPWD idea, it works great.. I'm not sure if it
would let a user change a password if it had expired though, I'll test
and find out.

Thanks