Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I can connect with a user who has permissions to set passwords. I'm able to change attributes, but I can't set the password.

Found some instructions to set the attribute unicodePwd to \UNC:"password", but it says:

Error: Modify: Unwilling To Perform. <53>

Setting LDAP_OPT_ENCRYPT to 1 didn't work either. The port I'm using is 389.

Note: this is a repost of a question from stackoverflow, so please go and vote to close the original.

share|improve this question
    
Is there some reason you're trying to reset a password in such an exotic manner? Why not use the AD Users & Computers console? –  ThatGraemeGuy Jun 1 '09 at 21:27

4 Answers 4

up vote 1 down vote accepted

You would use the userPassword attribute. Why are you using port 389, though? You wouldn't want to send a password change in clear text. I also don't believe AD will allow you to change a password via LDAP without an SSL connection.

share|improve this answer

I believe you should be using the userpassword attribute rather than the unicodePWD attribute. UserPassword is a writeable alias for unicodePWD.

share|improve this answer

Sam Cogan is correct. Use the other attribute. Here's a technet article describing how to do it.

share|improve this answer

To set unicodePwd directly using ldp.exe set LDAP_OPT_ENCRYPT = 1 to bind with an encrypted channel and use this syntax:

\UNI:"pwdhere"

The \UNI: and the quotes are very important as the password must be passed in Unicode and the quotes are used by the system to delimit the password.

You also need Reset Password permission if you want to replace the existing password and Change Password permissions to do a remove and add operation.

From here: http://microsoft.public.windows.server.active-directory.narkive.com/tBRamxYg/reset-password-problem

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.