Reset password

I'm trying to make a script so that the members of our helpdesk can
reset users passwords without have ADUC. Not easy for a rookie such
as myself. I would have thought there would be a ton of utilites /
scripts out there to do this in AD?? I did find one script online by
Brian Anderson but it doesn't seem to work correctly and so far my
lame attempts to fix it aren't helping! I don't need anything fancy
except I would like it to be as "easy and foolproof" as possible!
Heck, even a premade utility like those available for Novell would be
fine. I do have a small batch file using dsmod but the exe is needed
and it's not very user friendly.

Any solutions / ideas would be most welcome!

Gene
Sun Feb 20 20:32:28 CST 2005

Do you want the help desk to just reset a password? Or, do want them to
reset it and then set the flag for the user to change password on next logon
after the reset?

Have you considered using User Manager from NT4, they can use it to reset
passwords, and they can't browse your directory, and they don't need ADUC

"Me" <z@z.com> wrote in message
news:am6i11hrhu2opu0qfv7nn5fe5jdo18tf7r@4ax.com...
>
> I'm trying to make a script so that the members of our helpdesk can
> reset users passwords without have ADUC. Not easy for a rookie such
> as myself. I would have thought there would be a ton of utilites /
> scripts out there to do this in AD?? I did find one script online by
> Brian Anderson but it doesn't seem to work correctly and so far my
> lame attempts to fix it aren't helping! I don't need anything fancy
> except I would like it to be as "easy and foolproof" as possible!
> Heck, even a premade utility like those available for Novell would be
> fine. I do have a small batch file using dsmod but the exe is needed
> and it's not very user friendly.
>
> Any solutions / ideas would be most welcome!

Steve
Sun Feb 20 21:01:55 CST 2005

My company makes a utility that you can use for this purpose called Apollo
AD. It's shareware but is fully functional. The only limitation is that it
can only update 5 users at a time but since your helpdesk would only be
resetting the password for only 1 user at a time, this should work just
fine.

Regards,

--
Steve Seguis - MCSE, MVP Windows Server, SCJP
SCRIPTMATION, INC.
Automating the Enterprise
http://www.scriptmation.com


"Me" <z@z.com> wrote in message
news:am6i11hrhu2opu0qfv7nn5fe5jdo18tf7r@4ax.com...
>
> I'm trying to make a script so that the members of our helpdesk can
> reset users passwords without have ADUC. Not easy for a rookie such
> as myself. I would have thought there would be a ton of utilites /
> scripts out there to do this in AD?? I did find one script online by
> Brian Anderson but it doesn't seem to work correctly and so far my
> lame attempts to fix it aren't helping! I don't need anything fancy
> except I would like it to be as "easy and foolproof" as possible!
> Heck, even a premade utility like those available for Novell would be
> fine. I do have a small batch file using dsmod but the exe is needed
> and it's not very user friendly.
>
> Any solutions / ideas would be most welcome!

Steve
Sun Feb 20 21:15:26 CST 2005

BTW. It can be downloaded from our website at http://www.scriptmation.com.

--
Steve Seguis - MCSE, MVP Windows Server, SCJP
SCRIPTMATION, INC.
Automating the Enterprise
http://www.scriptmation.com


"Steve Seguis [MVP]" <steve_NO_SPAM@scriptmation.com> wrote in message
news:DacSd.9210$rB3.2296075@twister.nyc.rr.com...
> My company makes a utility that you can use for this purpose called Apollo
> AD. It's shareware but is fully functional. The only limitation is that it
> can only update 5 users at a time but since your helpdesk would only be
> resetting the password for only 1 user at a time, this should work just
> fine.
>
> Regards,
>
> --
> Steve Seguis - MCSE, MVP Windows Server, SCJP
> SCRIPTMATION, INC.
> Automating the Enterprise
> http://www.scriptmation.com
>
>
> "Me" <z@z.com> wrote in message
> news:am6i11hrhu2opu0qfv7nn5fe5jdo18tf7r@4ax.com...
>>
>> I'm trying to make a script so that the members of our helpdesk can
>> reset users passwords without have ADUC. Not easy for a rookie such
>> as myself. I would have thought there would be a ton of utilites /
>> scripts out there to do this in AD?? I did find one script online by
>> Brian Anderson but it doesn't seem to work correctly and so far my
>> lame attempts to fix it aren't helping! I don't need anything fancy
>> except I would like it to be as "easy and foolproof" as possible!
>> Heck, even a premade utility like those available for Novell would be
>> fine. I do have a small batch file using dsmod but the exe is needed
>> and it's not very user friendly.
>>
>> Any solutions / ideas would be most welcome!
>
>

Brandon
Sun Feb 20 23:20:23 CST 2005



Me wrote:

>
> I'm trying to make a script so that the members of our helpdesk can
> reset users passwords without have ADUC. Not easy for a rookie such
> as myself. I would have thought there would be a ton of utilites /
> scripts out there to do this in AD?? I did find one script online by
> Brian Anderson but it doesn't seem to work correctly and so far my
> lame attempts to fix it aren't helping! I don't need anything fancy
> except I would like it to be as "easy and foolproof" as possible!
> Heck, even a premade utility like those available for Novell would be
> fine. I do have a small batch file using dsmod but the exe is needed
> and it's not very user friendly.
>
> Any solutions / ideas would be most welcome!

exactly where are you having trouble? The code to set the password is
very simple and the most work comes from having to get your connection to
AD made and so forth. And I'd assume that once you change it you want to
force users to change it so that only they know it. THe flag for that is
pwdLastSet and it has to be a 0. The method for setting the password is,
oddly enough, setPassword()

We use a script at work that resets all users's password in a given OU
and in all the OUs under the given OU and sets the pwdLastSet flag so
they hav to change it when they log in. It's probably 20 lines long and
obviously does not have the limitation of the shareware app mentioned by
Steve. It doesn't take much to get a script like this working.

Me
Mon Feb 21 00:55:21 CST 2005

On Mon, 21 Feb 2005 02:32:28 GMT, "Gene"
<REMOVE-FOR-REPLYeugene_holt@yahoo.com> wrote:

>Do you want the help desk to just reset a password? Or, do want them to
>reset it and then set the flag for the user to change password on next logon
>after the reset?

Actually, I just need them to be able to reset it. Like I said, I can
let them use dsmod with a simple batch file but there is possiblity
for mistakes.

>Have you considered using User Manager from NT4, they can use it to reset
>passwords, and they can't browse your directory, and they don't need ADUC
>

I hadn't thought of it, but I would like them to be able to change it
from anywhere as opposed to just their PC.

Me
Mon Feb 21 01:01:40 CST 2005

On Mon, 21 Feb 2005 03:15:26 GMT, "Steve Seguis [MVP]"
<steve_NO_SPAM@scriptmation.com> wrote:

>BTW. It can be downloaded from our website at http://www.scriptmation.com.

Do you mean Apollo AD? It looks like this does more than just allow
password resets. Kind of overkill for what I want but thanks anyway.

Me
Mon Feb 21 01:35:14 CST 2005

On Mon, 21 Feb 2005 05:20:23 GMT, Brandon McCombs <bmccombs@ma.rr.com>
wrote:

>
>
>Me wrote:
>
>>
>> I'm trying to make a script so that the members of our helpdesk can
>> reset users passwords without have ADUC. Not easy for a rookie such
>> as myself. I would have thought there would be a ton of utilites /
>> scripts out there to do this in AD?? I did find one script online by
>> Brian Anderson but it doesn't seem to work correctly and so far my
>> lame attempts to fix it aren't helping! I don't need anything fancy
>> except I would like it to be as "easy and foolproof" as possible!
>> Heck, even a premade utility like those available for Novell would be
>> fine. I do have a small batch file using dsmod but the exe is needed
>> and it's not very user friendly.
>>
>> Any solutions / ideas would be most welcome!
>
>exactly where are you having trouble? The code to set the password is
>very simple and the most work comes from having to get your connection to
>AD made and so forth. And I'd assume that once you change it you want to
>force users to change it so that only they know it. THe flag for that is
>pwdLastSet and it has to be a 0. The method for setting the password is,
>oddly enough, setPassword()

What I'm hoping for is a script that calls a message box that asks for
a username or given name (in a single domain) and then resets the
password for that user. Simple I know, but so far no joy.


>We use a script at work that resets all users's password in a given OU
>and in all the OUs under the given OU and sets the pwdLastSet flag so
>they hav to change it when they log in. It's probably 20 lines long and
>obviously does not have the limitation of the shareware app mentioned by
>Steve. It doesn't take much to get a script like this working.

Ooh, that would NOT be what I am looking for is to come in one morning
and are users can't login! :)

I just cannot believe that more places don't have need for this type
of thing.

Me
Mon Feb 21 02:37:32 CST 2005

On Sun, 20 Feb 2005 15:35:52 -0800, Me <z@z.com> wrote:

>
> I'm trying to make a script so that the members of our helpdesk can
>reset users passwords without have ADUC. Not easy for a rookie such
>as myself. I would have thought there would be a ton of utilites /
>scripts out there to do this in AD?? I did find one script online by
>Brian Anderson but it doesn't seem to work correctly and so far my
>lame attempts to fix it aren't helping! I don't need anything fancy
>except I would like it to be as "easy and foolproof" as possible!
>Heck, even a premade utility like those available for Novell would be
>fine. I do have a small batch file using dsmod but the exe is needed
>and it's not very user friendly.
>
> Any solutions / ideas would be most welcome!


Oh yea.... I do know I could use... NET USER but I was hoping for
something a little more elegant. :)

Gene
Mon Feb 21 06:01:50 CST 2005

NOTE: this is an example, and is not a complete script--you should test
thouroghly before using this. Also, you need to trap any errors that might
happen--mistyped user name, etc.

here is a link to Script Center covering passwords
http://www.microsoft.com/technet/scriptcenter/scripts/ad/users/pwds/default.mspx


here is the simple way to reset password for a user, use the input box
function to populate the user name

Dim strUsername 'define the variable for user name
Dim objUser 'define the object

strUsername = InputBox(prompt[, title][, default][, xpos][, ypos][,
helpfile, context])

Set objUser = GetObject("WinNT://NETBIOSDOMAINNAME/" & strUsername &
",user")
objUser.SetPassword "password"

Wscript.echo "Changed Password for: " & strUsername
Set objUser = Nothing


"Me" <z@z.com> wrote in message
news:db7j1156qijq1jgnokqd2jr0cjf8s51qj7@4ax.com...
> On Sun, 20 Feb 2005 15:35:52 -0800, Me <z@z.com> wrote:
>
> >
> > I'm trying to make a script so that the members of our helpdesk can
> >reset users passwords without have ADUC. Not easy for a rookie such
> >as myself. I would have thought there would be a ton of utilites /
> >scripts out there to do this in AD?? I did find one script online by
> >Brian Anderson but it doesn't seem to work correctly and so far my
> >lame attempts to fix it aren't helping! I don't need anything fancy
> >except I would like it to be as "easy and foolproof" as possible!
> >Heck, even a premade utility like those available for Novell would be
> >fine. I do have a small batch file using dsmod but the exe is needed
> >and it's not very user friendly.
> >
> > Any solutions / ideas would be most welcome!
>
>
> Oh yea.... I do know I could use... NET USER but I was hoping for
> something a little more elegant. :)