R
Ryan Hanisco
Is this thing on?? Ok, here goes...
I have two 2003 forests connected by a VPN tunnel with no trusts between
them. One runs an authentication domain for one of my clients and the
other is running Exchange, to which the users in the first domain connect
via RPCoHTTP. (Don't panic, this is only partially an exchange question.)
The issue is that when passwords expire on the domain hosting exchange, the
users in the other domain are never notified. They can get the warning in
OWA, but there is nothing coming through Outlook. The Exchange experts are
telling me that the way to do this is to create a two-way trust between the
domains, but this is not an option for political and security reasons.
I have an asp page that can verify that an account is about to expire and
allow users to change their password if I hand off the username as an input
parameter. I don't really like this though -- I have the usernames
identical between the domains, but there is no way to force this and I don't
like code that can break itself due to sloppy administration.
Are there other options that anyone can think of? I don't often get stumped
without a direction to go, but I am fast getting there.
I have two 2003 forests connected by a VPN tunnel with no trusts between
them. One runs an authentication domain for one of my clients and the
other is running Exchange, to which the users in the first domain connect
via RPCoHTTP. (Don't panic, this is only partially an exchange question.)
The issue is that when passwords expire on the domain hosting exchange, the
users in the other domain are never notified. They can get the warning in
OWA, but there is nothing coming through Outlook. The Exchange experts are
telling me that the way to do this is to create a two-way trust between the
domains, but this is not an option for political and security reasons.
I have an asp page that can verify that an account is about to expire and
allow users to change their password if I hand off the username as an input
parameter. I don't really like this though -- I have the usernames
identical between the domains, but there is no way to force this and I don't
like code that can break itself due to sloppy administration.
Are there other options that anyone can think of? I don't often get stumped
without a direction to go, but I am fast getting there.