change password pages

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Steve P (spozun_at_hotmail.com)
Date: 06/28/04


Date: Mon, 28 Jun 2004 10:47:26 -0400

We're running an ASP page (the stock page that comes with IIS for password
changing with some minor tweaks) which makes some ADSI calls - note: it
connects to the Active Directory a few times.

We are having trouble connecting to the Active Directory with these calls
(especially in a multiple NT Domain scenario - I.e. user ID's are in a
different domain that the web servers).

My question: How can we find out which identity is being used to make those
Active Directory calls from the ASP page?

We're having some confusion since there are a number of identities:
1. The configured identity for the virtual directory in IIS
2. The configured identity for the COM+ app space which maps to our virtual
dir.
3. The logged in user (to the desktop).
4. Other?

Can someone please tell me how to figure out which identity is being used to
connect to the AD?
Also, does anyone have experience with these Microsoft change password
pages? The pages don't see to work at all when the user IDs & the web
servers are in different (peer/trusted) NT Domains.

An interesting note: If we hardcode a particular identity into the actual
ADSI calls, we can get these AD connections to work. But we need a solution
without hardcoding plaintext passwords :-P. We need a solution where we can
just configure IIS, or COM+, or somewhere else with a good identity that has
permissions to make the connection - we're just not sure where to configure
this.

TIA.
--Steve P



Relevant Pages

  • Re: e-mail address
    ... Using ADSI, connecting to user object and reading email attribute. ... the net on how to use ADSI in ASP. ... Microsoft MVP Windows Server - Active Directory ...
    (microsoft.public.win2000.active_directory)
  • Re: Windows Authentication in VB
    ... Do you have Active Directory? ... you can use ADSI to connect to the ... directory and authenticate the user... ... I am currently working with ASP and Visual Basic 6.0 COM ...
    (microsoft.public.inetserver.iis.security)
  • Re: Retrieving users email address
    ... >>I'm trying to retrieve the users email address via ADSI in ASP. ... Jeff, ... My development server is XPSP2 and we are using Active Directory 2003 ...
    (microsoft.public.inetserver.asp.general)
  • Re: dllhost
    ... It's just about 100% pure ASP with com objects. ... DLLHOST goes to 95-100% utilization and stays there indefinitely unless IIS ... > a simple HTML page serve or do they also hung? ...
    (microsoft.public.inetserver.iis)
  • Re: Accessing 32 bit COM components in 64 bit IIS
    ... CGIs, and ASP scripts onto a 64bit machine, and it just works after they ... The most confusing aspect of running 32bit app on a 64bit OS is that you ... System32 access is redirected, etc). ... we will be introducing the ability to configure IIS to run ...
    (microsoft.public.inetserver.iis)