Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a domain controller on Windows Server 2008. When I set up my users, I gave them all a dummy password with the "must change on next login" checked.

Everyone's machine is all on the same network as the domain controller, but we are not forcing them to join their computers to the domain. The DC has a website which requires the use of domain accounts to access it.

How do I tell my users to change their domain passwords without connecting their PC to the domain or making them log in to a machine on the domain? I do not want anything I will have to install on each client to allow them to change their passwords (I have a password expiration policy). Most of these workstations are XP.

share|improve this question
2  
Why aren't you forcing them to join the domain??? –  Chris S Jan 12 '11 at 13:43
add comment

5 Answers

If you also use Exchange in your environment, depending on the version of Exchange, you may be able to implement this using OWA.

I'm guessing that the website that runs from the DC doesn't allow a change password dialog of any kind when users connect with their current passwords?

For example, one of the environments I support has Exchange 2007 on the back end. This morning I set myself to "Must change password on next login", waited a few minutes, and then logged into OWA. It let me in without changing my password, but gave me a message saying, "Your password expires today, would you like to change it now?"

This seems to be the way OWA works - when I reconnected to the server it forced me to change my password immediately, whereas OWA let me see my inbox and offered me a chance to change my password since it was expired.

share|improve this answer
    
Also, if the OWA option works for you and a user wants to change their password BEFORE it expires, they can do that as well. Ref: forevergeeks.com/change-domain-password-through-owa –  jefflunt Jan 12 '11 at 14:52
    
We don't use exchange –  Josh Jan 12 '11 at 15:48
add comment

If they have local logins, they can log in to their local systems and then use Remote Desktop to a domain-joined PC they're allowed login to. On first login there they'll be able to set their own password, which they can use going forward.

share|improve this answer
    
Remote desktop does not work. It prompts the user saying they must change their password before logging in, but does not take them to a password change screen. –  Josh Jan 10 '11 at 20:13
    
Hmm, didn't know that. Thanks for the response! –  Jeff McJunkin Jan 12 '11 at 16:26
add comment
up vote 0 down vote accepted

I downloaded a web-based password change application from http://www.netwrix.com/. I could have built one, but I don't exactly have the time. They have a freeware version that does what I need. It's in asp.net, so I was able to modify the aspx pages/layout to customize the look a little.

share|improve this answer
add comment

How do I tell my users to change their domain passwords without connecting their PC to the domain or making them log in to a machine on the domain?

It sounds like the only option is for the website that runs on the DC to implement this functionality. You can't change a domain password without somehow talking to the DC, either directly or indirectly.

share|improve this answer
add comment

COVRI Password Change web part for Microsoft® SharePoint® 2010 allows end users to change their own Local NT or Active Directory password with in SharePoint environment without administrator intervention complying with the company’s Password policies. It also notifies end users when their password is about to expire.

http://store.covrisolutions.com/Password_Change_WebPart.aspx

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.