I’m sure there is a lot of SOE (Standard Operating Environment) projects going on around the world. I’m always interested in how the AD design would be designed. Definitely, a new AD domain will be created and users will be migrated to this new AD domain. But… wait, there are still other legacy services like file shares, applications integrated with AD etc that users still need to access to. To solve this issue, at first, a Domain Trust was used to allow users to continue using their legacy resources. After a while, this wasn’t allowed anymore and each site is left to their own to figure a way out on how to allow their users to continue using their legacy AD domain’s resources. Don’t you hate it when your water or electricity supplier just cuts off your supply and left you to find your own supplies??!!
One way out is to make use of the Windows 2003 IIS Password Change tool (same as the one that comes with Exchange OWA). Follow these steps to get it working.
- Start the Microsoft Management Console (MMC) IIS Management snap-in by clicking Start, Programs, Administrative Tools, Internet Information Server (IIS) Management.
- Navigate to Web Sites, Default Web Site.
- Right-click Default Web Site. Select New, then select Virtual Directory. You'll see the Virtual Directory Creation Wizard Welcome screen.
- Click Next.
- Enter an alias of IISADMPWD and click Next.
- For the actual publish folder value, enter C:\windows\system32\inetsrv\iisadmpwd (where C:\windows is the directory in which Windows is installed). Click Next.
- For virtual directory permissions, select the Read and Run scripts check box, if it isn't already selected. Click Next.
- Click Finish.
- Under Web Service Extension make sure Active Server Pages is set to Allow
You can access the new interface at:
http://<server address>/iisadmpwd/aexp2.asp
to change a local account password or at:
http://<server address>/iisadmpwd/aexp2b.asp
to change a domain password.
The figure below shows a sample Web interface for changing a domain password.
* Note: Using IISADMPWD without an SSL connection sends the credentials over the network in clear text. For this reason it is recommended that you use IISADMPWD over an SSL connection. Use the “SelfSSL” tool from the IIS6 resource kit to create a SSL. Refer to this article for a step by step guide: http://www.visualwin.com/SelfSSL/