OWA change password feature in OWA 2007 (seperate from OWA) still possible?
I tried to "redo" the steps in this article here: http://support.microsoft.com/kb/297121/ Enabling the iisadmpwd virtual directory etc.. My goal was to enable direct access to the change password function like I was able to before via a web link : https://wan1.domain.com/iisadmpwd/aexp2b.asp?https://exchange02/owa (the old way has http://exchange02/exchange)... Is this still possible? IE: If a users password has expired, I dont think they can login to OWA and change it.. if i can get at the change password form itself, directly, then this is a workaround, or at least, this worked in the past.. Thanks
November 8th, 2007 6:52pm

I should add.. the reason for wanting this again, is that if a user has to change password at next login and they attempt to access OWA.. it just takes them to a page cannot be displayed error page.. previously i'd just have them go directly to the change password web page link and change it there, then they could log into OWA (in 2003).
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2007 7:02pm

change password through OWA is different in 2007 compared to previous versions. notice the "applies to" area at the bottom of your above article. here is the article for 2007 http://technet.microsoft.com/en-us/library/bb684904.aspx
November 8th, 2007 8:22pm

Mike Crowley wrote: change password through OWA is different in 2007 compared to previous versions. notice the "applies to" area at the bottom of your above article. here is the article for 2007 http://technet.microsoft.com/en-us/library/bb684904.aspx That article basically just mentions that its enabled by default in 2007.. it also references the older article i had referenced, for setting up the virtual directory as well.. So is there a way in 2007, to somehow goto a web page with the form that has the blanks to fill in.. IE: Userid old password new password confirm domain If a user has to change password at next login, i get a page cannot be displayed in OWA web access (it doesnt take you into OWA and let them goto the change password option)...
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2007 8:52pm

markm75c wrote: Mike Crowley wrote: change password through OWA is different in 2007 compared to previous versions. notice the "applies to" area at the bottom of your above article. here is the article for 2007 http://technet.microsoft.com/en-us/library/bb684904.aspx That article basically just mentions that its enabled by default in 2007.. it also references the older article i had referenced, for setting up the virtual directory as well.. So is there a way in 2007, to somehow goto a web page with the form that has the blanks to fill in.. IE: Userid old password new password confirm domain If a user has to change password at next login, i get a page cannot be displayed in OWA web access (it doesnt take you into OWA and let them goto the change password option)... Is this sort of thing achievable on IIS on the same 2007 Exchange box somehow? Thanks
November 12th, 2007 8:07pm

markm75c wrote: markm75c wrote: Mike Crowley wrote: change password through OWA is different in 2007 compared to previous versions. notice the "applies to" area at the bottom of your above article. here is the article for 2007 http://technet.microsoft.com/en-us/library/bb684904.aspx That article basically just mentions that its enabled by default in 2007.. it also references the older article i had referenced, for setting up the virtual directory as well.. So is there a way in 2007, to somehow goto a web page with the form that has the blanks to fill in.. IE: Userid old password new password confirm domain If a user has to change password at next login, i get a page cannot be displayed in OWA web access (it doesnt take you into OWA and let them goto the change password option)... Is this sort of thing achievable on IIS on the same 2007 Exchange box somehow? Thanks It's there by default, in OWA 2007 just click on 'options' in the upper right-hand corner and than click on 'change password'. BTW, I like their 2003 better than mine (their is much prettier) but mine was first: http://support.microsoft.com/kb/555071 Erik
Free Windows Admin Tool Kit Click here and download it now
November 12th, 2007 10:03pm

Yeah.. i'm aware its in owa 2007 by default.. but when a users password has expired and needs changed.. they cant get into OWA to even get to the change button... What i need is a way to do as before.. via another web page: https://exchange02/iisadmpwd/aexp2b.asp When we try this in house.. it prompts for credentials... i put in my admin credentials only to bring up a error 404 file not found, page cannot be displayed message.
November 12th, 2007 11:57pm

I havent heard about conflicts between IISADMPWD and Exchange 2007, but than again I dont know anyone trying to use them together. Might want to try going through the setup one more time to make sure it's not misconfigured (adsutil.vbs, iisreset). If you want solid password change functionality that notifies of expiration I suggest publishing OWA with ISA (which has this functionality built-in). Actually if you plan on publishing OWA I always recommend ISA, I dont like having Exchange services directly facing the internet (violates best practices and good security common sense). Erik
Free Windows Admin Tool Kit Click here and download it now
November 13th, 2007 12:07am

Erik Szewczyk-MVP wrote: I havent heard about conflicts between IISADMPWD and Exchange 2007, but than again I dont know anyone trying to use them together. Might want to try going through the setup one more time to make sure it's not misconfigured (adsutil.vbs, iisreset). If you want solid password change functionality that notifies of expiration I suggest publishing OWA with ISA (which has this functionality built-in). Actually if you plan on publishing OWA I always recommend ISA, I dont like having Exchange services directly facing the internet (violates best practices and good security common sense). Erik I'm not too familiar with ISA server.. is this the type of server product you run on a box that isnt joined to the domain, on an edge server.. is it something you run on a box all by itself (we dont have any extra boxes to spare) about the only thing we can do is a virtual server instance through VMM etc... What are some of its features.. ie: i'm guessing it acts as a go between, between OWA and the router and the internet?
November 13th, 2007 12:57am

markm75c wrote: Erik Szewczyk-MVP wrote: I havent heard about conflicts between IISADMPWD and Exchange 2007, but than again I dont know anyone trying to use them together. Might want to try going through the setup one more time to make sure it's not misconfigured (adsutil.vbs, iisreset). If you want solid password change functionality that notifies of expiration I suggest publishing OWA with ISA (which has this functionality built-in). Actually if you plan on publishing OWA I always recommend ISA, I dont like having Exchange services directly facing the internet (violates best practices and good security common sense). Erik I'm not too familiar with ISA server.. is this the type of server product you run on a box that isnt joined to the domain, on an edge server.. is it something you run on a box all by itself (we dont have any extra boxes to spare) about the only thing we can do is a virtual server instance through VMM etc... What are some of its features.. ie: i'm guessing it acts as a go between, between OWA and the router and the internet? There are several deployment scenarios for ISA depending on what tasks it will need to carry out. Some have it off the domain (in a DMZ), however when publishing Exchange you would typically have it as a member of the domain (so that it can do user pre-authentication). Plenty of information can be found here: http://www.microsoft.com/technet/isa/2006/deployment/exchange.mspx Erik
Free Windows Admin Tool Kit Click here and download it now
November 13th, 2007 1:02am

markm75c wrote: I tried to "redo" the steps in this article here: http://support.microsoft.com/kb/297121/ Enabling the iisadmpwd virtual directory etc.. My goal was to enable direct access to the change password function like I was able to before via a web link : https://wan1.domain.com/iisadmpwd/aexp2b.asp?https://exchange02/owa (the old way has http://exchange02/exchange)... Is this still possible? IE: If a users password has expired, I dont think they can login to OWA and change it.. if i can get at the change password form itself, directly, then this is a workaround, or at least, this worked in the past.. Thanks Does anyone know how i could follow this article..http://support.microsoft.com/kb/297121/ and set it up so that the iispwd folder was in a different web site other than the default one? Or if this is even possible? Thanks
November 13th, 2007 4:33am

https://owa.domain.com/owa/?ae=Options&t=ChangePassword it will present the owa login page first then go directly to the change password page.
Free Windows Admin Tool Kit Click here and download it now
July 20th, 2009 8:26pm

Along with the above post from j_lear you need to do this on each CAS for passwords that have expired to be able to bring up this page: from http://technet.microsoft.com/en-us/library/bb684904.aspx Enable Users to Change Expired Passwords You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Outlook Web App Registry Editor" entry in the Client Access Permissions topic. Caution: Incorrectly editing the registry can cause serious problems that may require you to reinstall your operating system. Problems resulting from editing the registry incorrectly may not be able to be resolved. Before editing the registry, back up any valuable data. Log on to the Client Access server. Start Registry Editor (regedit). Locate the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchange OWA. Create the following DWORD value if it doesn't already exist: ChangeExpiredPasswordEnabled. The value type will be REG_DWORD. Set the value of ChangeExpiredPasswordEnabled to 1. Exit Registry Editor.
March 10th, 2011 11:01am

Basically I found a script that will email people when their passwords are going to expire ( I set it to 2 days) and put that link in the email ( https://owa.domain.com/owa/?ae=Options&t=ChangePassword) for them to change it themselves and it drastically cut down the helpdesk calls for password resets, after the calls for "Why am I getting these emails?" slowed LOL
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2011 11:06am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics