How to Configure Self-service Password Change for AD Users Leave a comment

Learn this information to learn to arrange self-service password reset for Energetic Listing customers.

Step 0: Evaluation Drawback Background and Overview

Each time customers want to alter their Energetic Listing password, they name the Service Desk crew. That is time-consuming and unsustainable.

So, your supervisor requested you to configure a device that enables customers to alter their passwords.

I’ll stroll you thru the steps to finish this process on this information.

I’m utilizing a Home windows Server 2022 Customary server for my take a look at configuration. The server have to be a member of the area, and you should check in to it along with your area credentials.

Step 1: Set up Distant Desktop Internet Entry and IIS Internet Server

1. From the Server Supervisor Handle menu, choose Add Roles and Options.

2. When the Add Roles and Options wizard opens, click on Subsequent till you get to the Server Roles web page. Then, test Distant Desktop Companies and Internet Server (IIS). Once you test Internet Server (IIS), the wizard dispays a pop-up, choose Add Options within the pop-up.

3. Affirm that the 2 roles are checked. Then, click on Subsequent.

4. Proceed clicking Subsequent till you get to Distant Desktop Companies Function Companies. Examine Distant Desktop Internet Companies, then, click on the Add Options button within the pop-up.

5. After that, click on Subsequent a number of instances till you get to the Affirmation web page. Click on Set up to put in the Home windows Server roles.

6. Watch for the wizard to substantiate that the roles have put in efficiently, the shut it.

Step 2: Allow the Password Reset Characteristic in IIS RDWeb

1. Seek for and open IIS.

2. Within the IIS Supervisor, increase the Server identify, then navigate to Websites > Default Internet Web site > RDWeb and left-click Pages. On the small print pane, double-click Utility Settings.

3. On the Utility Settings web page, double-click PasswordChangeEnabled and alter its Worth from false to true.

Step 3: Configure HTTPS Binding within the Distant Desktop Internet Web site

By default, the Distant Desktop Internet Web site in IIS is configured to make use of HTTPS. In the meantime, to make use of HTTPS, you require a certificates.

In the event you’re configuring self-service password reset for manufacturing use, I like to recommend buying a publicly signed certificates from a certificates authority.

Since I’m configuring mine for take a look at functions, I will likely be creating and utilizing a self-signed certificates.

Activity 3.1: Create a Self-signed Certificates

Open PowerShell as an administrator and run the command beneath to create a self-signed certificates.

Change the Dnsname, IPMvWAC, to your server identify.

New-SelfSignedCertificate -FriendlyName ad-ss-cert -DnsName IPMvWAC -KeyUsage DigitalSignature

Activity 3.2: Configure IIS HTTPS Binding to make use of the Certificates

1. Again within the IIS Supervisor, left-click Default Internet Web site, then within the Actions menu, choose Bindings.

2. Then, on the Web site Bindings pop-up, left-click https after which Edit.

3. Lastly, on the Edit Web site Bindings pop-up, choose the self-signed certificates from the SSL Certificates drop-down and click on OK. In the event you obtain a affirmation pop-up, choose sure.

4. Return to the PowerShell console and run the iisreset command.

Step 4: Take a look at the Self-service Password Change Distant Desktop Internet Web site

1. From a browser on the native server the place you configured the self-service password reset, open the URL beneath:

https://127.0.0.1/RDWeb/Pages/en-US/password.aspx

2. You’ll obtain a certificates warning. Click on Superior, then Proceed.

The location shows the web page for altering an AD password.

In case your customers obtain the error message – “Your new password doesn’t meet the size, complexity, or historical past necessities of your area. Attempt selecting a unique new password.” – modify your area password coverage.

If the password reset doesn’t work, be certain that the Varieties Authentication in Websites > Default Internet Websites > RDWeb > Pages is enabled.

Conclusion

Offering your customers with a technique to reset their passwords with out contacting the Service Desk is a time saver. On this hands-on information, I’ve defined the steps to allow self-service password reset utilizing Distant Desktop Internet companies.

Step one is to put in the IIS net server and the Distant Desktop Internet Entry Home windows Server roles. After that, configure the PasswordChangeEnabled function of the RDWeb web site in IIS.

Lastly, configure SSL and also you’re good to go.