OWA change password feature in OWA 2007 (seperate from OWA) still possible?
I tried to "redo" the steps in this article here: http://support.microsoft.com/kb/297121/
Enabling the iisadmpwd virtual directory etc..
My goal was to enable direct access to the change password function like I was able to before via a web link :
https://wan1.domain.com/iisadmpwd/aexp2b.asp?https://exchange02/owa (the old way has http://exchange02/exchange)...
Is this still possible?
IE: If a users password has expired, I dont think they can login to OWA and change it.. if i can get at the change password form itself, directly, then this is a workaround, or at least, this worked in the past..
Thanks
November 8th, 2007 6:52pm
I should add.. the reason for wanting this again, is that if a user has to change password at next login and they attempt to access OWA.. it just takes them to a page cannot be displayed error page.. previously i'd just have them go directly to the change password web page link and change it there, then they could log into OWA (in 2003).
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2007 7:02pm
change password through OWA is different in 2007 compared to previous versions. notice the "applies to" area at the bottom of your above article.
here is the article for 2007
http://technet.microsoft.com/en-us/library/bb684904.aspx
November 8th, 2007 8:22pm
Mike Crowley wrote:
change password through OWA is different in 2007 compared to previous versions. notice the "applies to" area at the bottom of your above article.
here is the article for 2007
http://technet.microsoft.com/en-us/library/bb684904.aspx
That article basically just mentions that its enabled by default in 2007.. it also references the older article i had referenced, for setting up the virtual directory as well..
So is there a way in 2007, to somehow goto a web page with the form that has the blanks to fill in.. IE:
Userid
old password
new password
confirm
domain
If a user has to change password at next login, i get a page cannot be displayed in OWA web access (it doesnt take you into OWA and let them goto the change password option)...
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2007 8:52pm
markm75c wrote:
Mike Crowley wrote:
change password through OWA is different in 2007 compared to previous versions. notice the "applies to" area at the bottom of your above article.
here is the article for 2007
http://technet.microsoft.com/en-us/library/bb684904.aspx
That article basically just mentions that its enabled by default in 2007.. it also references the older article i had referenced, for setting up the virtual directory as well..
So is there a way in 2007, to somehow goto a web page with the form that has the blanks to fill in.. IE:
Userid
old password
new password
confirm
domain
If a user has to change password at next login, i get a page cannot be displayed in OWA web access (it doesnt take you into OWA and let them goto the change password option)...
Is this sort of thing achievable on IIS on the same 2007 Exchange box somehow?
Thanks
November 12th, 2007 8:07pm
markm75c wrote:
markm75c wrote:
Mike Crowley wrote:
change password through OWA is different in 2007 compared to previous versions. notice the "applies to" area at the bottom of your above article.
here is the article for 2007
http://technet.microsoft.com/en-us/library/bb684904.aspx
That article basically just mentions that its enabled by default in 2007.. it also references the older article i had referenced, for setting up the virtual directory as well..
So is there a way in 2007, to somehow goto a web page with the form that has the blanks to fill in.. IE:
Userid
old password
new password
confirm
domain
If a user has to change password at next login, i get a page cannot be displayed in OWA web access (it doesnt take you into OWA and let them goto the change password option)...
Is this sort of thing achievable on IIS on the same 2007 Exchange box somehow?
Thanks
It's there by default, in OWA 2007 just click on 'options' in the upper right-hand corner and than click on 'change password'.
BTW, I like their 2003 better than mine (their is much prettier) but mine was first:
http://support.microsoft.com/kb/555071
Erik
Free Windows Admin Tool Kit Click here and download it now
November 12th, 2007 10:03pm
Yeah.. i'm aware its in owa 2007 by default.. but when a users password has expired and needs changed.. they cant get into OWA to even get to the change button...
What i need is a way to do as before.. via another web page:
https://exchange02/iisadmpwd/aexp2b.asp
When we try this in house.. it prompts for credentials... i put in my admin credentials only to bring up a error 404 file not found, page cannot be displayed message.
November 12th, 2007 11:57pm
I havent heard about conflicts between IISADMPWD and Exchange 2007, but than again I dont know anyone trying to use them together. Might want to try going through the setup one more time to make sure it's not misconfigured (adsutil.vbs, iisreset).
If you want solid password change functionality that notifies of expiration I suggest publishing OWA with ISA (which has this functionality built-in). Actually if you plan on publishing OWA I always recommend ISA, I dont like having Exchange services directly facing the internet (violates best practices and good security common sense).
Erik
Free Windows Admin Tool Kit Click here and download it now
November 13th, 2007 12:07am
Erik Szewczyk-MVP wrote:
I havent heard about conflicts between IISADMPWD and Exchange 2007, but than again I dont know anyone trying to use them together. Might want to try going through the setup one more time to make sure it's not misconfigured (adsutil.vbs, iisreset).
If you want solid password change functionality that notifies of expiration I suggest publishing OWA with ISA (which has this functionality built-in). Actually if you plan on publishing OWA I always recommend ISA, I dont like having Exchange services directly facing the internet (violates best practices and good security common sense).
Erik
I'm not too familiar with ISA server.. is this the type of server product you run on a box that isnt joined to the domain, on an edge server.. is it something you run on a box all by itself (we dont have any extra boxes to spare) about the only thing we can do is a virtual server instance through VMM etc...
What are some of its features.. ie: i'm guessing it acts as a go between, between OWA and the router and the internet?
November 13th, 2007 12:57am
markm75c wrote:
Erik Szewczyk-MVP wrote:
I havent heard about conflicts between IISADMPWD and Exchange 2007, but than again I dont know anyone trying to use them together. Might want to try going through the setup one more time to make sure it's not misconfigured (adsutil.vbs, iisreset).
If you want solid password change functionality that notifies of expiration I suggest publishing OWA with ISA (which has this functionality built-in). Actually if you plan on publishing OWA I always recommend ISA, I dont like having Exchange services directly facing the internet (violates best practices and good security common sense).
Erik
I'm not too familiar with ISA server.. is this the type of server product you run on a box that isnt joined to the domain, on an edge server.. is it something you run on a box all by itself (we dont have any extra boxes to spare) about the only thing we can do is a virtual server instance through VMM etc...
What are some of its features.. ie: i'm guessing it acts as a go between, between OWA and the router and the internet?
There are several deployment scenarios for ISA depending on what tasks it will need to carry out. Some have it off the domain (in a DMZ), however when publishing Exchange you would typically have it as a member of the domain (so that it can do user pre-authentication). Plenty of information can be found here:
http://www.microsoft.com/technet/isa/2006/deployment/exchange.mspx
Erik
Free Windows Admin Tool Kit Click here and download it now
November 13th, 2007 1:02am
markm75c wrote:
I tried to "redo" the steps in this article here: http://support.microsoft.com/kb/297121/
Enabling the iisadmpwd virtual directory etc..
My goal was to enable direct access to the change password function like I was able to before via a web link :
https://wan1.domain.com/iisadmpwd/aexp2b.asp?https://exchange02/owa (the old way has http://exchange02/exchange)...
Is this still possible?
IE: If a users password has expired, I dont think they can login to OWA and change it.. if i can get at the change password form itself, directly, then this is a workaround, or at least, this worked in the past..
Thanks
Does anyone know how i could follow this article..http://support.microsoft.com/kb/297121/ and set it up so that the iispwd folder was in a different web site other than the default one?
Or if this is even possible?
Thanks
November 13th, 2007 4:33am
https://owa.domain.com/owa/?ae=Options&t=ChangePassword
it will present the owa login page first then go directly to the change password page.
Free Windows Admin Tool Kit Click here and download it now
July 20th, 2009 8:26pm
Along with the above post from j_lear you need to do this on each CAS for passwords that have expired to be able to bring up this page:
from http://technet.microsoft.com/en-us/library/bb684904.aspx
Enable Users to Change Expired Passwords
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Outlook Web App Registry Editor" entry in the
Client Access Permissions topic.
Caution:
Incorrectly editing the registry can cause serious problems that may require you to reinstall your operating system. Problems resulting from editing the registry incorrectly may not be able to be resolved. Before editing the registry, back up any valuable
data.
Log on to the Client Access server. Start Registry Editor (regedit). Locate the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchange OWA.
Create the following DWORD value if it doesn't already exist: ChangeExpiredPasswordEnabled. The value type will be
REG_DWORD. Set the value of ChangeExpiredPasswordEnabled to 1.
Exit Registry Editor.
March 10th, 2011 11:01am
Basically I found a script that will email people when their passwords are going to expire ( I set it to 2 days) and put that link in the email (
https://owa.domain.com/owa/?ae=Options&t=ChangePassword) for them to change it themselves and it drastically cut down the helpdesk calls for password
resets, after the calls for "Why am I getting these emails?" slowed LOL
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2011 11:06am