Password Change: Difference between revisions
| (4 intermediate revisions by 2 users not shown) | |||
| Line 10: | Line 10: | ||
A valid license for Password Self-service | A valid license for Password Self-service | ||
A valid license for Password reset (reset password for others) | |||
===Testing after setup=== | ===Testing after setup=== | ||
| Line 26: | Line 28: | ||
The settings can be found under “Web setup\Edit” | The settings can be found under “Web setup\Edit” | ||
[[File:Passwordchangewebsetup.png|none|thumb]] | |||
===Allowed groups=== | |||
[[File:Passwordchangewebsetup.png|none|thumb|819x819px]] | |||
The configuration of “User lock” consist of 2 sets of settings: | The configuration of “User lock” consist of 2 sets of settings: | ||
| Line 33: | Line 37: | ||
*A number of groups (AD groups) which can have their password reset. | *A number of groups (AD groups) which can have their password reset. | ||
First | First a group needs to added with access to reset password for users. | ||
[[File:Passwordchangeaccesstoreset. | [[File:Passwordchangeaccesstoreset.jpg|none|thumb|498x498px]]<br /> | ||
==== Display name ==== | |||
Enter a saying display name | |||
===== Group ===== | |||
Browse for an existing AD group or write the samaccountname. | |||
===== Show username ===== | |||
Show the Username from UMS | |||
===== Templates ===== | |||
Opens another window where you can select the templates you are allowed to reset password for. | |||
===== Service account ===== | |||
Choose a Service Account with access to the domain in which the group is residing. | |||
==== Show UPN ==== | |||
Show the Username from Active directory. This slows the loading in UMS web when showing users. | |||
==== Show "Change password at next logon" ==== | |||
Let the users who is resetting the others password decide if they want those users to change password at next logon. | |||
==== Force "Change password at next logon" ==== | |||
This will force "change password at next logon" when resetting passwords. | |||
====Max number of users==== | |||
This defines how many users can be reset in one request. If user is a member of multiple settings the largest number is used. | |||
if you enter a 0 its means no limit and is therefor seen as the largest number. | |||
===Which groups=== | |||
Next step is to choose the groups that can have their password reset with this module: | Next step is to choose the groups that can have their password reset with this module: | ||
[[File:Passwordchangewhichgroups.png|none|thumb]] | [[File:Passwordchangewhichgroups.png|none|thumb|819x819px]] | ||
Click “Add…” | Click “Add…” | ||
[[File:Passwordchangeadd.png|none|thumb]] | [[File:Passwordchangeadd.png|none|thumb|492x492px]] | ||
*Enter a saying display name, and browse for an existing AD group. | *Enter a saying display name, and browse for an existing AD group. | ||
| Line 51: | Line 80: | ||
*Choose a Service Account with access to the domain in which the group is residing. | *Choose a Service Account with access to the domain in which the group is residing. | ||
===Combine groups=== | |||
The last step is combine the 2 groups: | The last step is combine the 2 groups: | ||
[[File:Passwordchangecombine.png|none|thumb]] | [[File:Passwordchangecombine.png|none|thumb|819x819px]] | ||
Click “Add…” | Click “Add…” | ||
[[File:Passwordchangeeditcombinedrights.png|none|thumb]] | [[File:Passwordchangeeditcombinedrights.png|none|thumb|393x393px]] | ||
Choose the 2 groups. | Choose the 2 groups. | ||
Now a basic setting is completed. | Now a basic setting is completed. | ||
[[File:Passwordchangecombine2.png|none|thumb]] | [[File:Passwordchangecombine2.png|none|thumb|819x819px]] | ||
Remember that it’s possible to add a large number af groups if needed, so the needed resulting combined rights is correct. | Remember that it’s possible to add a large number af groups if needed, so the needed resulting combined rights is correct. | ||
Latest revision as of 13:29, 25 March 2021
With Password Change, users with the appropriate rights – e.g. teachers or administrative staff – can change password for other uses with just a few clicks. It is possible to change passwords for individual entire classes or groups, without involving the IT department. Password Change is particularly helpful if more users need to change their password at the same time, e.g. entire classes, as this is the least time-consuming option. It is, however, also possible to change password for one individual user at a time.
Prerequisites
Supported administrative systems
All
Module requirements
A valid license for Password Self-service
A valid license for Password reset (reset password for others)
Testing after setup
Log in with the user who has access to change the password. Change password and check that it has switched.
What to have ready
Active Directory
Password Filter must be installed on all DCs
Installation
This module is already installed with the standard UMS Web installation.
Technical settings
The password is always reset to the password setting on the individual users primary template.
The settings can be found under “Web setup\Edit”
Allowed groups
The configuration of “User lock” consist of 2 sets of settings:
- A number of groups (AD groups) which have access to reset users password.
- A number of groups (AD groups) which can have their password reset.
First a group needs to added with access to reset password for users.
Display name
Enter a saying display name
Group
Browse for an existing AD group or write the samaccountname.
Show username
Show the Username from UMS
Templates
Opens another window where you can select the templates you are allowed to reset password for.
Service account
Choose a Service Account with access to the domain in which the group is residing.
Show UPN
Show the Username from Active directory. This slows the loading in UMS web when showing users.
Show "Change password at next logon"
Let the users who is resetting the others password decide if they want those users to change password at next logon.
Force "Change password at next logon"
This will force "change password at next logon" when resetting passwords.
Max number of users
This defines how many users can be reset in one request. If user is a member of multiple settings the largest number is used.
if you enter a 0 its means no limit and is therefor seen as the largest number.
Which groups
Next step is to choose the groups that can have their password reset with this module:
Click “Add…”
- Enter a saying display name, and browse for an existing AD group.
- Optional an OU search path can be entered. This means that the users both need to be in the group and placed in the “Search path” or below in AD.
- Choose a Service Account with access to the domain in which the group is residing.
Combine groups
The last step is combine the 2 groups:
Click “Add…”
Choose the 2 groups.
Now a basic setting is completed.
Remember that it’s possible to add a large number af groups if needed, so the needed resulting combined rights is correct.
Typical example:
In the above example, “All teachers” can reset password for “All students”. And “Admins” can reset for both “All students” and “All teachers”.