Is there any way to force setpassword API call to be validated by Windows passwo

  • Thread starter Thread starter glchen
  • Start date Start date
G

glchen

Is there any way to force setpassword API call to be
validated by Windows password policies?

Background:
There are two AD programmatic and GUI interfaces to update
AD password. One is to "change password" and the other is
to "reset password". Change password requires the old
password/newpassword. Reset(set) password does not
require the old password.
AD password policy enforcement seems to only impact on the
change password cases. "Reset password" seems to bypass
the checking of password policy settings

I implemented a self-service password update website which
allows users to reset password if users provide correct
security data (so called attribute-based authentication).
This self-service password uses "set password" API (not
change password) since self-service password website is
mainly used by the users who forgot his password or his
password expired (use attribute-base authentication).
 
Hi,

I am also working on the setpassword through web. when
ever i am executing setpassword i am getting error.

could you give me idea how you are dealing with that
problem
 
That's odd .. but the doc I have looked at does not mention anything on the
subject. Have you tried to play arouind with the IADsuser object properties?

PasswordExpirationDate

PasswordMinimumLength

RequireUniquePassword

you may either want to set the exp date to the same day, forcing the user
**hopefully** top change his password rather than resetting it or, set
password min length and the unique password flag.

cheers,
 
A subset of the rules are enforced on set versus change, this is so admins
can't do a quick reset without having to worry about histories, etc. You can
write a password filter for the DCs that enforces these rules or you can use
the changepassword api or you can enforce the checks in your code.
 
What kind of error you received?
-----Original Message-----
Hi,

I am also working on the setpassword through web. when
ever i am executing setpassword i am getting error.

could you give me idea how you are dealing with that
problem

.
Click to expand...
 
I don't have an answer for you but...

I was wondering what utility you're using for this web-based password reset
utility?
 
Back
Top