Re: Questions about password policies

From: JohnB MSFT (a-johnbe_at_online.microsoft.com)
Date: 08/29/04 

Date: Sun, 29 Aug 2004 01:55:49 GMT

If you are using the latest release of the products and SSL, the users
should be able to change their password using OWA.

XWEB: Unable to Change Password Using OWA
http://support.microsoft.com/?id=186863

How to enable password change functionality for Microsoft Exchange Server
Outlook Web Access
http://support.microsoft.com/?id=268419

Users Are Not Prompted to Change Password in OWA
http://support.microsoft.com/?id=322264

HOW TO: Use the Change Password Feature in Outlook Web Access
http://support.microsoft.com/?id=327134

How To: Enable user password changes through Exchange 2003 OWA

How To: Enable user password changes through Exchange 2003 OWA Steps:
1. Configure E2K3 Server to use SSL
2. Create new IISADMPWD Virtual Directory in IIS 6.0 under Default Website
a. Give Read Permissions
b. Give Run Scripts Permissions
3. Edit Value of Regkey DisablePassword under
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeWEB\OWA
(Change from 1 to 0)
4. Restart IIS
Note: You may have issues if you are running URLScan on the IIS Server.

Front End/Back End Server configuration requires that you do these steps
(at minimum change the regkey value to 0) on the Backend Servers hosting
the mailboxes as well.

Detailed Steps:
In order to do so you must first configure your server to use SSL. Then,
you need to create a new Virtual Directory called IISADMPWD under the
Default Web Site.
1. Open Internet Information Services Manager from the Administrative
Tools.
2. In IIS Manager expand SERVERNAME (Where SERVERNAME is your server name
object), expand Web Sites, and then expand Default Web Site.
3. Right-click Default Web site and choose New, then select Virtual
Directory.
4. In the Welcome screen click Next.
5. In the Virtual Directory Alias window type IISADMPWD. Click Next.
6. In the Website Content Directory screen navigate to
%Systemroot%\System32\Inetsrv\Iisadmpwd. Click Next.
7. In the Virtual Directory Access Permissions grant Read, and Run Scripts.
Click Next.
8. Click Finish.
9. See that the new Virtual Directory is listed in the folder list on the
right-pane of the IIS Admin console. Next, you need to enable the Change
Password button in the Registry of the server.
1. Open Regedt32
2. Navigate to DisablePassword under
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeWEB\OWA
(Change from 1 to 0)
3. Restart the IIS Services (you can do it from the IIS Admin tool).
Now check to see if the Change Password option is available in OWA:
1. Open OWA in a web browser
2. Logon with your username and password.
3. Click on the Options button.
4. In the Options window scroll all the way down. Notice the Change
Password button. Click it.
5. Notice the Change Password window opening. Try to use it.
Note: You may have issues if you are running URLScan on the IIS Server,
also, you may need to configure this on both FE & BE Servers to get this to
work correctly for your users.

Regards,

John Behneman MCSE NT/2000
Microsoft Corporation

Get Secure! - www.microsoft.com/security
 
=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.