Re: Web based password reset

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

<giftedwon@xxxxxxxxx> wrote in message
news:1157662825.401815.20330@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello all. I am looking for a web based password reset util.

You will need to find, buy, borrow, or build this.

Also a
way that users can click on forgot my password and have it e-mailed to
a certain address. Is this possible?

Nope. Windows doesn't KNOW your users passwords in most
cases.

Is there a program out there that can do this? Thanks.

You could write a program that does the first (resets the password
on demand from a web form then use it for setting up something
that creates a random (and temporary, i.e., "must change on next
logon") password, changes to that, then mails them this password plus
the link to the first web page to change it to their own choice.

Certainly a script (running as an admin or other privileged user)
could do the 'dirty deed'.

Notice that email is NOT secure in general. (It can be secure but you
have to use SSL to make that work and this is seldom the default.)

HTTP (web pages) can also use SSL (i.e., HTTPS) to secure this web
form you build and this should DEFINITELY be used as part of the
solution.

If you find something suitable then please post your solution.

You might also ask this question on one of the Web server newsgroups
(IIS or your actual web server.)

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]




.

Relevant Pages

  • Re: ModSSL - Knoppix 3.3
    ... NameVirtualHosts and SSL don't mix. ... This automatically pushes an incorrect http request to the secure host over ... > I create some server key & crt. ...
    (Focus-Linux)
  • Re: Are http links after signing in with https secure?
    ... HTTP requests are not secure; ... If IIS only accepts SSL requests, then those links using HTTP will fail. ...
    (microsoft.public.isa.publishing)
  • Re: From http:// to https://
    ... > I have a login page that is secured with SSL and other non secure pages ... As Server.Transefer or response.redirect takes http by default. ... > standard method to transefer pages from normal to SSL page and vice versa. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Changing domain password remotely
    ... it is very recommended that you use SSL to secure this ... You might need to edit asp code a bit (e.g. replace http with ... > are implementing passwords to expire after X number of days. ...
    (microsoft.public.security)
  • Re: Ace Password Sniffer : How does it work ?
    ... >> Another protocol that offers same is IPSec. ... >> authentication and secure transfer of data between server and client ... >> would be pretty hard to use SSL to secure data exchanged between ... Once you are done with the secured login, ...
    (microsoft.public.security)