Configure Self-service Password Change for AD Customers

Learn this information to discover ways to arrange self-service password reset for Energetic Listing customers.

Step 0: Assessment Drawback Background and Overview

Each time customers want to vary their Energetic Listing password, they name the Service Desk group. That is time-consuming and unsustainable.

So, your supervisor requested you to configure a software that permits customers to vary their passwords.

I’ll stroll you thru the steps to finish this job on this information.

I’m utilizing a Home windows Server 2022 Commonplace server for my take a look at configuration. The server have to be a member of the area, and you should check in to it together with your area credentials.

Step 1: Set up Distant Desktop Net Entry and IIS Net Server

1. From the Server Supervisor Handle menu, choose Add Roles and Options.

2. When the Add Roles and Options wizard opens, click on Subsequent till you get to the Server Roles web page. Then, examine Distant Desktop Providers and Net Server (IIS). If you examine Net Server (IIS), the wizard dispays a pop-up, choose Add Options within the pop-up.

3. Verify that the 2 roles are checked. Then, click on Subsequent.

4. Proceed clicking Subsequent till you get to Distant Desktop Providers Position Providers. Verify Distant Desktop Net Providers, then, click on the Add Options button within the pop-up.

5. After that, click on Subsequent a number of instances till you get to the Affirmation web page. Click on Set up to put in the Home windows Server roles.

6. Look forward to the wizard to substantiate that the roles have put in efficiently, the shut it.

Step 2: Allow the Password Reset Characteristic in IIS RDWeb

1. Seek for and open IIS.

2. Within the IIS Supervisor, increase the Server identify, then navigate to Websites > Default Net Web site > RDWeb and left-click Pages. On the small print pane, double-click Utility Settings.

3. On the Utility Settings web page, double-click PasswordChangeEnabled and alter its Worth from false to true.

Step 3: Configure HTTPS Binding within the Distant Desktop Net Web site

By default, the Distant Desktop Net Web site in IIS is configured to make use of HTTPS. In the meantime, to make use of HTTPS, you require a certificates.

For those who’re configuring self-service password reset for manufacturing use, I like to recommend buying a publicly signed certificates from a certificates authority.

Since I’m configuring mine for take a look at functions, I can be creating and utilizing a self-signed certificates.

Process 3.1: Create a Self-signed Certificates

Open PowerShell as an administrator and run the command beneath to create a self-signed certificates.

Change the Dnsname, IPMvWAC, to your server identify.

New-SelfSignedCertificate -FriendlyName ad-ss-cert -DnsName IPMvWAC -KeyUsage DigitalSignature

Process 3.2: Configure IIS HTTPS Binding to make use of the Certificates

1. Again within the IIS Supervisor, left-click Default Net Web site, then within the Actions menu, choose Bindings.

2. Then, on the Web site Bindings pop-up, left-click https after which Edit.

3. Lastly, on the Edit Web site Bindings pop-up, choose the self-signed certificates from the SSL Certificates drop-down and click on OK. For those who obtain a affirmation pop-up, choose sure.

4. Return to the PowerShell console and run the iisreset command.

Step 4: Take a look at the Self-service Password Change Distant Desktop Net Web site

1. From a browser on the native server the place you configured the self-service password reset, open the URL beneath:

https://127.0.0.1/RDWeb/Pages/en-US/password.aspx

2. You’ll obtain a certificates warning. Click on Superior, then Proceed.

The positioning shows the web page for altering an AD password.

In case your customers obtain the error message – “Your new password doesn’t meet the size, complexity, or historical past necessities of your area. Strive selecting a special new password.” – modify your area password coverage.

If the password reset doesn’t work, be certain that the Kinds Authentication in Websites > Default Net Websites > RDWeb > Pages is enabled.

Conclusion

Offering your customers with a strategy to reset their passwords with out contacting the Service Desk is a time saver. On this hands-on information, I’ve defined the steps to allow self-service password reset utilizing Distant Desktop Net providers.

Step one is to put in the IIS net server and the Distant Desktop Net Entry Home windows Server roles. After that, configure the PasswordChangeEnabled function of the RDWeb web site in IIS.

Lastly, configure SSL and also you’re good to go.