Password Change

With Password Change, users with the appropriate rights – e.g. teachers or administrative staff – can change password for other uses with just a few clicks. It is possible to change passwords for individual entire classes or groups, without involving the IT department. Password Change is particularly helpful if more users need to change their password at the same time, e.g. entire classes, as this is the least time-consuming option. It is, however, also possible to change password for one individual user at a time.

Prerequisites

Supported administrative systems

All

Module requirements

UMS Web

A valid license for Password Self-service

A valid license for Password reset (reset password for others)

Testing after setup

Log in with the user who has access to change the password. Change password and check that it has switched.

What to have ready

Active Directory

Password Filter must be installed on all DCs

Installation

This module is already installed with the standard UMS Web installation.

Technical settings

The password is always reset to the password setting on the individual users primary template.

The settings can be found under “Web setup\Edit”

Allowed groups

The configuration of “User lock” consist of 2 sets of settings:

• A number of groups (AD groups) which have access to reset users password.
• A number of groups (AD groups) which can have their password reset.

First a group needs to added with access to reset password for  users.

Display name

Enter a saying display name

Group

Browse for an existing AD group or write the samaccountname.

Show username

Show the Username from UMS

Templates

Opens another window where you can select the templates you are allowed to reset password for.

Service account

Choose a Service Account with access to the domain in which the group is residing.

Show UPN

Show the Username from Active directory. This slows the loading in UMS web when showing users.

Show "Change password at next logon"

Let the users who is resetting the others password decide if they want those users to change password at next logon.

Force "Change password at next logon"

This will force "change password at next logon" when resetting passwords.

Max number of users

This defines how many users can be reset in one request. If user is a member of multiple settings the largest number is used.

if you enter a 0 its means no limit and is therefor seen as the largest number.

Which groups

Next step is to choose the groups that can have their password reset with this module:

Click “Add…”

• Enter a saying display name, and browse for an existing AD group.
• Optional an OU search path can be entered. This means that the users both need to be in the group and placed in the “Search path” or below in AD.
• Choose a Service Account with access to the domain in which the group is residing.

Combine groups

The last step is combine the 2 groups:

Click “Add…”

Choose the 2 groups.

Now a basic setting is completed.

Remember that it’s possible to add a large number af groups if needed, so the needed resulting combined rights is correct.

Typical example:

In the above example, “All teachers” can reset password for “All students”. And “Admins” can reset for both “All students” and “All teachers”.