return to tranceaddict TranceAddict Forums Archive > Main Forums > Chill Out Room

 
Geeks: methods of changing Active Directory password when not on the domain?
View this Thread in Original format
david.michael
I have a scenario in which I need for users to be able to change their passwords (and potentially unlock their accounts) from computers not at all attached to the Active Directory/domain.

Any good open-source tools/pages/methods that anyone is aware of, regarding this? Ideally, a website the users could go to and change their password would be perfectly sufficient.
EddieZilker
Okay. Edit the config file and delete any text there replacing it with standard English instructions for what you want the computer to do. If that gives you ANY problems, it's probably related to a useless file called System32.exe. Go ahead and just delete that file because it's a lot like an appendix or tonsils for computers.
Abercrombie
quote:
Originally posted by EddieZilker
If that gives you ANY problems, it's probably related to a useless file called System32.exe. Go ahead and just delete that file because it's a lot like an appendix or tonsils for computers.


Awesome!!! I just deleted that file like you said, and my computer is 10x faster! Thanks man.
david.michael
quote:
Originally posted by EddieZilker
Okay. Edit the config file and delete any text there replacing it with standard English instructions for what you want the computer to do. If that gives you ANY problems, it's probably related to a useless file called System32.exe. Go ahead and just delete that file because it's a lot like an appendix or tonsils for computers.



Finally, I've been looking for a solution like this for years. I'm obviously in the wrong profession!

:: quits job ::

:: buys guitar ::
Sunsnail
Hmm, usually something like this can be solved by a quick format
malek
quote:
Originally posted by david.michael
I have a scenario in which I need for users to be able to change their passwords (and potentially unlock their accounts) from computers not at all attached to the Active Directory/domain.


no, that's so wrong on so many levels.


I'm really curious about that dumb scenario.
KilldaDJ
you are forgetting bacon
Joss Weatherby
quote:
Originally posted by malek
no, that's so wrong on so many levels.


I'm really curious about that dumb scenario.



Yea... Thats just... Yea...

Do it and gimme domain info kthx. :D
aNYthing
quote:
Originally posted by david.michael
I have a scenario in which I need for users to be able to change their passwords (and potentially unlock their accounts) from computers not at all attached to the Active Directory/domain.

Any good open-source tools/pages/methods that anyone is aware of, regarding this? Ideally, a website the users could go to and change their password would be perfectly sufficient.


Open source/free? Not unless you script it. Here's a ms solition:

http://technet.microsoft.com/en-us/library/cc720655(WS.10).aspx

Just google "active directory password self service"

Good luck
Jarvmeister
You decided to look for an answer to an AD question in the COR?

You'll go far in IT.

david.michael
quote:
Originally posted by Jarvmeister
You decided to look for an answer to an AD question in the COR?

You'll go far in IT.


Considering that I am an enterprise systems administrator for a Fortune 500 company at 26 years old and have been here since I was in high school, I'm fairly happy with how far I've gone "in IT". But, thanks. :)

Anyways, AD has been discussed on here before, so there are apparently people here who work with it.

quote:
Originally posted by malek
no, that's so wrong on so many levels.


I'm really curious about that dumb scenario.


Without getting into great and gory detail, it's an AD in a lab environment which exists apart from the corporate network. The lab has several resources which are AD/NT authentication enabled (Drupal, Zimbra, Mantis, Sharepoint, etc.) and, thus, we run the lab in its own AD seeing as how it's easier to maintain one set of user/password credentials than 15. This is the way we have it set up since company policy prevents setting up a trust with the corporate AD.

The lab network is accessible only by a VPN pool, and is not forward-facing to the Internet.

Thus, none of the actual computers accessing the network are a member of the AD, just user accounts. I see nothing wrong with that.

quote:
Originally posted by aNYthing
Here's a ms solition:

http://technet.microsoft.com/en-us/library/cc720655(WS.10).aspx


Perfect, exactly the sort of thing I'm looking for. Thanks!
CLICK TO RETURN TO TOP OF PAGE
 
Privacy Statement