Skip to main content
Question

Active Directory Password Solution

  • September 19, 2016
  • 7 replies
  • 0 views

Forum|alt.badge.img+2

Hi all,

We are currently a mixed Windows / OS X house and have recently put in Casper to administer our Macs.

The Macs are not AD bound but we do use AD for certain services e.g. printing, WiFi (authentication) and emails (Exchange environment) etc.

Currently when staff are required to change their AD password (every 60 days), they will go onto OWA to change it.

Our new fearless leader has decided that we should migrate to Google mail for our email services and decommission the current exchange environment. The primary issue right now is finding a solution on how staff can change their password remotely without the use of OWA.

Any ideas would be much appreciated.

Thanks,

Andy

7 replies

Forum|alt.badge.img+3
  • New Contributor
  • 2 replies
  • September 19, 2016

For our clients in similar situations, we opt for a web-based self-service password & account management portal. Of course, this all depends on the client's needs and budget.

Here are some tools we've deployed in the past:

https://www.manageengine.com/products/self-service-password/ (paid)

https://github.com/pwm-project/pwm (open source)

https://github.com/unosquare/passcore (open source - very basic)


jconte
Forum|alt.badge.img+12
  • Valued Contributor
  • 131 replies
  • September 19, 2016

We are AD bound for years without issue, you might want to look into Apple Enterprise Connect. You'll get different opinions from the community, but nonetheless it might help you out.


Forum|alt.badge.img+7
  • Contributor
  • 39 replies
  • September 19, 2016

You can either port an old copy of iisadmpwd from Windows Server 2003 or use RD Web Access: http://www1.se.cuhk.edu.hk/~hmleung/wordpress/?p=1999


Forum|alt.badge.img+4
  • Contributor
  • 15 replies
  • September 19, 2016

I just rolled out Passcore myself.


iJake
Forum|alt.badge.img+21
  • Contributor
  • 279 replies
  • September 19, 2016

Have you looked into Enterprise Connect from Apple Professional Services?
https://jamfnation.jamfsoftware.com/discussion.html?id=17757


Forum|alt.badge.img+10
  • Valued Contributor
  • 117 replies
  • September 19, 2016

@pchen_plaid How did you roll it out? Looking to to test it.


Forum|alt.badge.img+5
  • Contributor
  • 65 replies
  • September 19, 2016

Passcore has an excellent, easy to use ui but it if you're looking for something to allow staff to change passwords when it expires it won't fit the bill. Similarly it doesn't like or allow a new password to be created if it's set in AD to "User must change password at next logon". Back to the drawing board for me at least.


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings