Solved

Can a secret question and answer be stored in Active Directory (Server 2008 R2) for self service password reset (Forgotten Password)?

Posted on 2010-08-19
3
1,835 Views
Last Modified: 2013-11-05
We are developing a web site that uses Active Directory security.  We would like to store all information pertaining to users authentication credentials in Active Directory.  I have seen many references to ASP.Net Active Directory security model in the .Net framework classes.  In order to make password resets self service we would like to use the secret question and answer method to allow users to reset their password if they can answer the secret question correctly.  Is this ability native to Active Directory, or would we have to modify the schema to allow this?
0
Comment
Question by:jwright2375
3 Comments
 
LVL 4

Accepted Solution

by:
illhelpu earned 500 total points
ID: 33476659
Check this article out, it should help you out.

http://technet.microsoft.com/en-us/library/cc720655%28WS.10%29.aspx
0
 

Author Comment

by:jwright2375
ID: 33484598
Thank you very much for your suggestion illhelpyou.  In the newest version Forefront Identity Manager, we would have to install SharePoint in the DMZ, which is not an option right now.  We want to develop a lightweight solution.  If Active Directory cannot handle this natively, we have planned to store the old secret question and answer information in SQL Server with a salt and hash.  I so hoped it was built into AD 2008, but it looks like to build the functionality in, we will have to install and manage 2 additional server products.  Wow, that seems like a lot more work than we can handle.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

OfficeMate Freezes on login or does not load after login credentials are input.
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

785 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question