Re: Validating Old Passwords Before Changing Them

You can't do an LDAP bind when the user's state is set to "user must change
password at next logon". In fact, I don't think you can call LogonUser
either. I'm not actually sure how GINA does this, but there does not seem
to be a straightforward way to take advantage of this OS features.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Alan" <balasuar@xxxxxxxxx> wrote in message
news:62aa883b-1cd4-4cb0-8c68-7f3cf3dc6d04@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

I'd like to write a custom logon control, and I've run into a snag
when trying to handle "User Must Change Password At Next Login"

I'd like to validate a users old/current password against the domain
before showing the user the form to change the password.

Doing an LDAP Bind() fails with the current creds.

Any Ideas how to accomplish this?

Thanks,
-Alan


.

Relevant Pages

  • Re: Web Single Sign On
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... current Windows credentials to the server, ... This common identity is the user's username used to logon to the ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Problem establishing SSL connection in code-behind
    ... It appears that you have the correct audits configured on the machine. ... The 540 event is the logon ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: SetPassword and ChangePassword Invoke
    ... You can't get out of that state programmatically with ADSI using ... Win Logon has some special way that it handles this, ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password Expiration
    ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... ' Expire the password so it must be change at next logon. ... Whenever this script runs, the user will need to change their password ... maximum password age affecting domain user accounts is a domain-level ...
    (microsoft.public.windows.server.active_directory)