How do I configure the Web Console so that the 'User must change password at next logon' flag is alw (NETIQKB33108)

  • Document ID:7733108
  • Creation Date:02-Feb-2007
  • Modified Date:19-Jun-2007
    • Micro Focus Products:
      Directory and Resource Administrator

Resolution

goal
How do I configure the Web Console so the 'User must change password at next logon' flag is always checked when a password is reset?

fact
Directory and Resource Administrator 6.x

fact
Directory and Resource Administrator 7.x

fix

To ensure that the 'User must change password at next logon' flag is always checked when resetting a user accounts password in the Web Console, the Web Console must be customized.  The following customization must be made on all IIS servers running the Directory and Resource Administrator (DRA) Web Component:

  1. Launch Windows Explorer on the IIS server.

  2. Browse to the following directory:

    \Inetpub\wwwroot\DRAWeb\WebConsole\BuiltIn\AccountManagement\Users\UserResetPassword

  3. Copy the Properties.asp page.

  4. Paste the Properties.asp page to the following directory:

    \Inetpub\wwwroot\DRAWeb\WebConsole\Custom\AccountManagement\Users\UserResetPassword

  5. Highlight the file, right click, and select Edit.

  6. Modify the file as follows, and save. Put the code right above the line that contains "ADUtil.SetInfoSafe":

    If Not ADUtil.PutPropertySafe(User, "$McsUserMustChangePassword", True, "boolean", sErrorMsg) then
     SaveChanges = False
     Exit Function
    End If

The above steps must either be performed on all IIS servers running the DRA Web Component or you can copy the modified Properties.asp file to the \Inetpub\wwwroot\DRAWeb\WebConsole\Custom\AccountManagement\Users\UserResetPassword directory on all other IIS servers.



note
The Assistant Admin performing the Password Reset operation using the Web Console must have the 'Whether User Must Change Password at Next Logon' power.  The 'User must change password at next logon' field will be exposed when the Assistant Admin performs the Password Reset operation, and the Assistant Admin will be able to check\uncheck the flag.  However, if the Assistant Admin unchecks the flag, the customization made above will ensure that the flag is checked when the password is reset.

Additional Information

Formerly known as NETIQKB33108