Software

Ask something
Discussion Locked

User's password reset via Windows logon screen

0 helpful
27 replies

by fedecz

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

I would like to know if someone have any idea of how to able an user in a domain controled enviroment (Active Directoy) to reset it own password in case it has forgotten it via the Windows logon screen.

Any suggestions?

Thank you.

27 replies

by tobif

If you don't need too high security, you might define a passwordless guest account, where the only possible action would be a connection to a "self service" for password reset.

But I would still recommend that you involve an alternative channel. The password reset procedure could, for instance, generate a new password and send it via sms to the phone number you have stored for the user.

by tobif

Well, that's why I propose that the new password would be sent via sms. Then you'd need to borrow the mobile phone of your target. But I agree, this is not the most secure solution.

by tobif

Your remark is very true. In the countries where I spend most of my time, mobile penetration is above 100% and every single mobile phone has sms.

by seanferd

How can one be helpful in advising on how to execute a really bad idea?

If a user can reset a password (via the logon screen??), then the user isn't a user, and you may as well not have passwords at all.

If this were possible, MS would have put the information in their documentation, and would have put a little link on the login screen for "Reset my password - I forgot it".

by seanferd

Another tool would have to be installed across the network. (But we don't want to bother the administrator, so let's see how this goes.)

by charliespencer

"The user accesses ReACT via an account that is secured with Group Policy."

Ah. So they'll remember that account name when they can't remember the p/w they were using last week? How do your users remember it? Post-it under the mouse pad?

by robo_dev

and all...you know, those silly enrollment questions.

In our case the user has to answer the 'first car you owned', 'what city you were born in', questions.

We are working with the vendor to see if we can use the the employee phone extension or employee badge number as one of the questions.

Lisa, Chevy Vega, Gary Indiana....whoops.

by tobif

I prefer to remember my password.
If a site forces me to enter this kind of "security answers", I usually enter something like "ojf9iqhg9qngqn[bni" and pray that their logics will never ask me to repeat that garbish...

by robo_dev

Her security questions were her dog's name, where she was born, and her high school name....all data you can find in 30 seconds with Google. :)

by robo_dev

There's a square at the bottom that says

REACT
Locked yourself out?
Forgot Your Password?
No problem, Just Click Here.

by sarasony

is your operating system is windows7 or vista? i know windows7 can create a password cd/dvd after you create a windows password , you can use this dvd to recovery your windows password when you lost the windows password, i recommend you a password reset here, i think it is a professional one, the download page is: www.resetwindowspassword.net

This discussion is closed to new replies.