Enable Change Password option in OWA 2003

Posted on 2004-11-03
Last Modified: 2012-06-01

I've followed the procedures below and still cannot see the change password button. Anyone have any clue what I'm missing? If this is enabled on the FE, does it also need to be enabled on the back-end? Anyone done this with a large enterprise clustered environment? OWA works great, and has been for several months. I also tried changing the password flags for W3Svc to 0 to no avail.

How to enable password change functionality for Microsoft Exchange Server Outlook Web Access

OWA configured as a Front-End server on Windows 2003 / Exchange 2003 Enterprise SP1 - Front-End Server

1. From Windows Explorer, verify that the physical directory exists at C:\Windows\System32\Inetsrv\Iisadmpwd. It should contain nine *.htr files.  
2. From within the IIS Microsoft Management Console (MMC) snap-in, open the default Web site.
3. Right-click the default Web site and point to New on the pop-up menu, and then click Virtual Directory.
4. On the second screen of the wizard, give the virtual directory an alias of IISADMPWD. On the third screen, give the folder a physical directory location of C:\WINNT\System32\Inetsrv\Iisadmpwd. On the fourth screen, select Read, Run Script, and Execute Access privileges. Click finish on the fifth screen of the wizard to prompt creation of the folder.
5. At this point, you can change user passwords through Outlook Web Access. Passwords must be entered in a DOMAIN\Username format to be changed. Additionally, all password complexity and history requirements must be met when you change a password or an error will be returned.

Note The IISADMPWD requires a Secure Sockets Layer (SSL) connection to work. This is designed to avoid changing passwords across a network through HTTP, which is clear text. After you click the submit button, the protocol is changed from HTTP to HTTPS. If necessary, follow the steps in Help to obtain a server certificate for the Web server (http://localhost/iishelp/iis/htm/core/iiocrsc.htm on a server with IIS installed). You can also use Microsoft Certificate Services 2.0 (which is included with Windows 2000) to sign a server certificate that can be used by IIS to enable an SSL session.

You can hide the Change Password button by adding the following registry key:
1. Start Registry Editor, and then locate the preceding registry key.
2. On the Edit menu, click Add Key to add a new key named OWA.
3. On the Edit menu, click Add Value to add the following value to the OWA registry subkey if you want the Change Password button to appear:
Value name: DisablePassword
Data: 0

If you want to hide the Change Password button, add the following value to the OWA registry subkey:
Value name: DisablePassword
Data: 1
4. Stop and then restart the Exchange Information Store Service (MSExchangeIS) and the Microsoft Internet Information Services Admin Service--this stops the World Wide Web Publishing Service (W3SVC).  
5. Make sure you restart all other dependent services (IMAP4, POP3, Microsoft Exchange Routing engine, W3SVC, MTA Stacks, and so on).
Question by:BNettles73
    LVL 9

    Accepted Solution

    Hi BNettles73,

    You only need to enable the change password button on your back-end servers:

    Location: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeWeb\OWA
    Value: DisablePassword
    Type: REG_DWORD
    Value Data: 0 or 1
    Enter the value 0 if you want to enable the change password feature. (The Change Password button is available.)
    Enter the value 1 if you want to disable the change password feature. (The Change Password button is unavailable.)

    And create the IISADMPWD virtual directory on the front-end servers.

    Michael Lundgren
    LVL 12

    Author Comment


    That was it ...

    I was trying to do everything on the Front-end ... I had a suscpicion that was it but more or less wanted confirmation.

    IIS changes made on the FE
    Registry changes made on the BE
    IISReset on the FE

    Password Change is now enabled.

    Thanks Michael!

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    Join & Write a Comment

    Set OWA language and time zone in Exchange for individuals, all users or per database.
    Easy CSR creation in Exchange 2007,2010 and 2013
    In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
    how to add IIS SMTP to handle application/Scanner relays into office 365.

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now