Have user change AD Password via Self Service?

[jalbert]

Has anybody come up with a way to allow users to change their AD Password via script or otherwise in Self Service?

We have NoMADLoginAD configured now but because our AD isn't publicly accessible and we don't want to hand out VPN creds to every member of Staff, is there a way that you might be handling this that could help?

Thanks!

[alexjdale]

I would look to your Directory Services team to provide a secure tool for this if users need to do it off-net and have no VPN capability. It's not something you can proxy with the JSS.

It's odd that a user would be off-network and need this functionality, yet not be considered worthy of VPN access.

[jalbert]

School district, teachers are away almost 3 months of the year but have their computers, this is the time I am most worried about. Only a few select need VPN Access - might reconsider that, but was hoping for another solution in the meantime

[aconte]

I think I already know the answer to this, but I figured I'd ask.

Does your school leverage/have an IdP (Okta or OneLogin as an example)?

[jalbert]

No.