To modify the domain user account password in Windows Server R2 by using the Web method

Source: Internet
Author: User
Tags ldap ssl certificate ssl connection

In the Windows domain environment, adding domain client to modify the account password is a very easy thing; even if there are no clients in the domain. If you are using an Exchange messaging system in your organization, you can easily modify your account password with Exchange-based OWA.

The Web+portal certification does not support AD+LDAP dual authentication when there is a small number of LDAP users in the Web+portal authentication period. In order for this part of the user to also be able to achieve certification, the use of domain name + username (to avoid the same name as the domain users) into the ad, and set the initial password. However, the problem also arises, this part of the user does not add domain and no Exchange mailbox, how can I login to change the password for the first time?

Remember that in Windows 2003 IIS, you can modify the domain user password by using the ASP Web file IISADMPWD module that modifies the domain user's password. However, the IISADMPWD feature is no longer supported on IIS 7, and there will be no IISADMPWD modules for Windows Server 2008 and IIS to install properly. So how do you port the module to Windows Server R2?

1, first find a Server2003 system, confirm that the Internet Information Service (IIS) is installed.

Then go to the C:\WINDOWS\system32\inetsrv\iisadmpwd directory, copy iisadmpwd this directory and sub-files.

2. Server R2 System Preparation

Install the Web server (IIS) and confirm that the IIS6 script tool is installed.

Since our server R2 is a 64-bit system, the copy Iisadmpwd directory needs to be placed in the C:\Windows\SysWOW64\inetsrv\ directory of the system

Register the IISpwchg.dll file under the Iisadmpwd directory:

Run the command prompt as administrator, enter the following command, and then press ENTER

regsvr32 C:\Windows\SysWOW64\inetsrv\iisadmpwd\iispwchg.dll

Configure the PasswordChangeFlags property to ensure that the password modification is available:

Run the command prompt as administrator, switch to the C:\Inetpub\Adminscripts directory, enter the following command, and then press ENTER

cscript.exe adsutil.vbs set w3svc/passwordchangeflags 0

Note: Set the value of the PasswordChangeFlags property, which you can combine with the

0: Default value, means change password with SSL connection

1: Allow unsecured port to change password, this is useful for the SSL function being banned

2: Disable Password change

4: Disable password expiration prompt

3, Configuration IIS7

First, confirm that HTTPS is available for the default Web site, and bind the certificate;

Open Internet Information Services (IIS) Manager. Click on the "Default Web Site" site, then click "Bind" in the action bar on the right.

Select the "https" protocol, and then click "Edit" to select the certificate of the native server in the SSL certificate

Once you have configured HTTPS, right-click on "Default Web Site" and select "Add Application" from the menu.

Open the Add Application Wizard, the alias is filled with "Iisadmpwd" (the name can be customized, but the default is recommended to use this ^_^), the physical path, click Browse to select Iisadmpwd directory, and finally click "OK"

Return to Default Web site defaults site, click Iisadmpwd Virtual directory, open the default document to add IISADMPWD default page aexp2.asp

Then return to the Iisadmpwd directory, open "SSL Settings" and Cancel "require SSL (Q)"

4. Modify the domain user password

Open your browser, enter HTTP://SERVERNAME/IISADMPWD, enter your account information and new password, then click "OK".

Since we enabled the HTTPS protocol, HTTPS://SERVERNAME/IISADMPWD also has access to the

Changing the password will directly invoke the HTTPS protocol to access the appropriate ASP script, click "Continue to this website (not recommended)"

Finally, the password modification was successful.

Attached: When you enter a user name and password, click OK, when the page "cannot be displayed" is displayed, confirm that the HTTPS protocol is enabled and configured with the correct certificate in the binding of the default site.

This article is from the "Sun Liang IT Operations Technology" blog, be sure to keep this source http://shubao.blog.51cto.com/401810/1092564

To modify the domain user account password in Windows Server R2 by using the Web method

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.