Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Can a secret question and answer be stored in Active Directory (Server 2008 R2) for self service password reset (Forgotten Password)?

Posted on 2010-08-19
3
Medium Priority
?
2,039 Views
Last Modified: 2013-11-05
We are developing a web site that uses Active Directory security.  We would like to store all information pertaining to users authentication credentials in Active Directory.  I have seen many references to ASP.Net Active Directory security model in the .Net framework classes.  In order to make password resets self service we would like to use the secret question and answer method to allow users to reset their password if they can answer the secret question correctly.  Is this ability native to Active Directory, or would we have to modify the schema to allow this?
0
Comment
Question by:jwright2375
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 4

Accepted Solution

by:
illhelpu earned 2000 total points
ID: 33476659
Check this article out, it should help you out.

http://technet.microsoft.com/en-us/library/cc720655%28WS.10%29.aspx
0
 

Author Comment

by:jwright2375
ID: 33484598
Thank you very much for your suggestion illhelpyou.  In the newest version Forefront Identity Manager, we would have to install SharePoint in the DMZ, which is not an option right now.  We want to develop a lightweight solution.  If Active Directory cannot handle this natively, we have planned to store the old secret question and answer information in SQL Server with a salt and hash.  I so hoped it was built into AD 2008, but it looks like to build the functionality in, we will have to install and manage 2 additional server products.  Wow, that seems like a lot more work than we can handle.
0

Featured Post

AWS Certified Solutions Architect - Associate

This course has been developed to provide you with the requisite knowledge to not only pass the AWS CSA certification exam but also gain the hands-on experience required to become a qualified AWS Solutions architect working in a real-world environment.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question