Configure the domain user account password by using the Web method under the Win2003 system

In the case where the client joins the domain, it is convenient for users to modify their own account password, but if the client is not joined to the domain, but he is also using domain accounts to log on to other applications, such as the integration of AD FTP sites, the use of domain accounts for Internet access authentication and so on, how to modify the password at this time? The answer is to use the web approach.

In fact, Windows 2003 has its own password to modify the domain user related ASP Web page file, location in C:windowssystem32inetsrviisadmpwd, only to be published in IIS.

Here's how to use these files.

1. Create a new "virtual directory" on IIS

2, enter the virtual directory alias for "IISADMPWD"

3. Set permissions for Read and execute

4. Complete

5. Modify the default content document in the properties of the new virtual directory

6, in IE, enter the address http://192.168.253.128/iisadmpwd/ can open the Web page

7, but, accidentally occurred, fill in the user name, old password and new password, click to confirm, do not open the Web page, carefully look, the original is SSL encryption, check a bit, the original is not a certificate.

8, install "Remote Management (HTML)", get a certificate.

9, open the Administration properties

10, select " Server Certificate"

11, select "Export Current certificate to a. pfx file"

12, select the path

13, enter the password for the encryption certificate

14. Open the properties of the default Web site where the IISADMPWD virtual directory resides

15, select the "Directory security " tab inside the " Server Certificate"

16. Select "Import certificate from. prx file"

17. Select the certificate file you just exported

18. Enter the certificate encryption password entered when exporting the certificate

19, enter the SSL port number

20, after the completion of the acquisition can be changed password.

If the following error occurs, modify the password policy in the default domain security policy and use the Gpupdate/force command to refresh it.