Re: Password Reset

["Taylor, James R" <JimTaylor () MISSOURISTATE EDU>]

We use a locally-developed application called CAMS (Computer Account
Management System).  It is a VB6 application that uses ADSI to connect
with Active Directory.  The user goes to a Web page and provides either
a user ID and old password or a student ID and PIN number to get access
to the change page.

 

We also use this system to setup new accounts.  For example, new
freshmen, once they get their ID card, can go to an open lab and have
the lab attendant swipe the card to automatically establish an AD
account with a temporary password.

 

One caveat - it has been our experience that users who employ EFS on
their local machine and use CAMS (as opposed to Ctrl-Alt-Del) to change
their password lose access to any files encrypted by EFS.  This is not a
good situation so we don't promote the use of EFS - we're more likely to
promote TrueCrypt.

 

__________________________

Jim Taylor

Technology Projects Coordinator

Computer Services

Missouri State University

417-836-5226

http://computerservices.missouristate.edu
<http://computerservices.missouristate.edu> 

 

________________________________

From: Aron Smetana [mailto:smetana () UNR EDU] 
Sent: Tuesday, December 05, 2006 1:17 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Password Reset

 

At the University of Nevada, Reno, we use Microsoft Active Directory to
authenticate all faculty, staff, and students.  Most of our central
applications and library resources authenticate off of it either
directly or via LDAP.  We are now researching password self-reset
functionality.

My question for the group is if anyone else is using Active Directory
for authentication and what (if anything) you've done for a user
self-reset utility/application of passwords.

Thanks much,

-- 
Aron Smetana, MBA
University of Nevada, Reno
Information Technology
Director, Campus Computing & Security
smetana () unr edu
(775) 784-1540 x274