Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

As IT Support, my team is taking so much time reseting passwords. So, we thought it would be interesting to enable some sort of Password Challenge in Active Directory so users could reset their own passwords, after correctly answering some questions.

Despite we alert users by mail when their passwords are going to expire, they just delete the mail and go on so we think it should be a great idea.

I've seen some commercial products but I'm not sure if there is something built-in or GPL to enable this kind of feature.

Could someone shed some light about it?

share|improve this question
Out of curiosity, what is the size of your organisation? Another option is to use delegated control and let line managers reset passwords for their team. – Matt Apr 12 '12 at 22:44
It's an international company, pretty big with so many customers. Maybe Accenture sounds familiar to you. – Antonio Laguna Apr 13 '12 at 4:58
up vote 6 down vote accepted

There is nothing built-in to Active Directory to allow self-serve password resets. The only Open Source utility in this vein that I am aware of is pwm.

Of course, as I'm sure you already know, this isn't a technology problem, this is a personnel problem. What you need is management support behind an initiative to encourage employees to take responsibility for their own technology.

At once place I'm aware of, password resets as a result of lockout caused a $5 charge. In cash. In a tip jar. On the Sr. SysAdmin's desk. That kind of management is awesome. That is not the norm, but nevertheless, you can implement whatever technology you want, but after you implement a self serve portal, people will simply ignore the URL for the page and instead call you on your desk phone whining "You used to do this for me before!"

share|improve this answer
We're used to change procedures from time to time so, despite they refuse the change in the begining, they have to live with it. Thanks for your answer! – Antonio Laguna Apr 13 '12 at 6:10
@AntonioLaguna Excellent! Sounds like you have a head start over most of us. =) – Wesley Apr 13 '12 at 15:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.