Re: Changing Domain Passwords

["Miller, Richard" <miller () KUTZTOWN EDU>]

We are currently addressing the same issue.  Our choice was to use ILM to synchronize the account passwords.  That way 
we do not have to worry about disabling different methods for resetting domain passwords.  Microsoft sells a cheap 
version of ILM for use with Live - I think it's about $500 or so.  It takes a little effort to come up to speed on ILM 
if you don't currently use it, but is probably worthwhile.


Rick Miller
Kutztown University


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of STEVE 
MAGRIBY
Sent: Monday, June 21, 2010 11:47 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Changing Domain Passwords

Our students have always changed their domain (Active Directory) password through Outlook Web Access (Exchange 2003).
However, we recently outsourced our student email to MS Live@edu. Now we are wondering how students will be able to 
change his/her password without coming on campus and logging into a domain workstation.

If we use Live@edu's SSO (single sign-on) students will still need to be on the domain to change their domain password.

If any other schools have outsourced student email we would be grateful to hear of solutions for changing passwords in 
the domain (Active Directory) either without being on campus.

Thanks for any information you can provide.