Re: How to change user account properties by ASP.NET?

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 11/23/04


Date: Tue, 23 Nov 2004 17:01:30 -0600

You would have to ask them for it unless you are using Basic authentication,
in which case you can just read the auth_password header. Most password
change processes prompt the user to enter the old password as well as the
new one to verify that the current user actually knows the old one, so I
don't think users will be too bothered by this.

Joe K.

"Evgeny Zoldin" <zoldin@hotmail.com> wrote in message
news:eGY5mza0EHA.2040@tk2msftngp13.phx.gbl...
> Hi Joe,
>
> thank you for your advice, but how can I get oldPassword of currently
> logged User in ASP.NET for feed ChangePassword method?
>
> Evgeny
>
> "Joe Kaplan (MVP - ADSI)" <joseph.e.kaplan@removethis.accenture.com> wrote
> in message news:%23q46FZa0EHA.2228@TK2MSFTNGP15.phx.gbl...
>> Normally, a user can only call ChangePassword on themselves, not
>> ResetPassword. Administrators generally have rights to ResetPassword.
>> The latter doesn't require knowing the old password, the former does.
>>
>> I think that will solve it.
>>
>> Joe K.
>>
>> "Evgeny Zoldin" <zoldin@hotmail.com> wrote in message
>> news:OeW$%23Ca0EHA.1256@TK2MSFTNGP10.phx.gbl...
>>> Hi ALL.
>>>
>>> I have the configuration:
>>> 1. WinXP PRO with MS IIS 5.0 and installed ASP.NET
>>> 2. ASP.NET application A configured to authenticate only users from
>>> local Users group.
>>>
>>> I would like to de the following:
>>> Logged on user is able through ASP.NET-Pages to change its own Logon
>>> Username, Password and Full Name
>>>
>>> I tried to implement it by the code (C#):
>>>
>>> DirectoryEntry deCurrUser = new DirectoryEntry("WinNT://" +
>>> User.Identity.Name);
>>> deCurrUser.Invoke("SetPassword", new string[]{"123"} ); // ***
>>>
>>> If the logged on user belongs only to Users group then the statement ***
>>> causes Exception "SystemUnautherizedException: General access denied
>>> error".
>>> But as soon as that user has been included into Administrators group the
>>> statement *** is executed well.
>>>
>>> I know about impersonation possibility, but it requires to type clear
>>> Administrators username and password in code-behind class that will be
>>> published on target server.
>>>
>>> So, what should I do in order to give to user the ability to change its
>>> username, password and full name?
>>> May be orginize on the target server a group, add the users into the
>>> group and gain to this group some specils rights?
>>>
>>> Thanx
>>> Evgeny
>>>
>>
>>
>
>



Relevant Pages

  • Re: How to change user account properties by ASP.NET?
    ... in which case you can just read the auth_password header. ... > Hi Joe, ... > logged User in ASP.NET for feed ChangePassword method? ... Administrators generally have rights to ResetPassword. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: How to change user account properties by ASP.NET?
    ... in which case you can just read the auth_password header. ... > Hi Joe, ... > logged User in ASP.NET for feed ChangePassword method? ... Administrators generally have rights to ResetPassword. ...
    (microsoft.public.de.inetserver.iis.asp)
  • Re: Setting versus Changing Password
    ... the Invoke method like this: ... Joe K. ... >> Call ChangePassword instead and supply the old and new passwords. ... >> Note that generally only the currently authenticated user has rights to ...
    (microsoft.public.windows.server.active_directory)