Solved

IIS change password multiple domains

Posted on 2010-09-14
6
904 Views
Last Modified: 2012-05-10
Im running win2003 IIS. I have setup the change password feature for OWA, intranet etc. I recently added an additional domain to my forest. The change password feature is not working for the users in the new domain. Any ideas?
0
Comment
Question by:KratosDefense
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 21

Expert Comment

by:Radhakrishnan R
ID: 33674278
ok..You created addtional domain controller for this domain or one more domain for existing forest?
I guess its additional domain - So u have to create a trust between these 2 domain, also you have to enable the GC role for this server, then wait for rplication happenes or do gpupdate \force for force update.
0
 

Author Comment

by:KratosDefense
ID: 33674333
Already done all of that (trust, GC etc.) Domain has been in place for a month already.
0
 
LVL 21

Expert Comment

by:Radhakrishnan R
ID: 33674531
0
Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

 

Author Comment

by:KratosDefense
ID: 33675883
Nope didn't fix. I have the IISADMPWD setup and working properly. I believe the problem is in the achg.asp page. here is a snippet from it:

<%end if%>
<%
      On Error resume next
      dim domain, posbs, posat, username, pUser, root
      dim upn_name

      upn_name = ""

      domain = Trim(Request.Form("domain"))
      ' if no domain is present we try to get the domain from the username,
      ' e.g. domainusername or praesi@ultraschallpiloten.com
      
      if domain = "" then
            posbs = Instr(1,Request.Form("acct"),"\" )
            posat = Instr(1,Request.Form("acct"),"@" )
            if posbs > 0 then
                  domain = Left(Request.Form("acct"),posbs-1)
                  username = Right(Request.Form("acct"),len(Request.Form("acct")) - posbs)
            elseif posat > 0 then
                  upn_name = Request.Form("acct")
                  domain = Right(upn_name, len(upn_name) - posat)
                  username = Left(upn_name, posat-1)
            else      
                  username = Request.Form("acct")
                  set nw = Server.CreateObject("WScript.Network")
                  domain = "WFINET"
                  ' domain = nw.Computername
            end if

Note the domain WFINET, thats the domain it works for, I need it to look at an additional domain if the user account doesnt exist in the wfinet domain. Any idea what the asp coding would be that I need to add?
0
 
LVL 21

Accepted Solution

by:
Radhakrishnan R earned 500 total points
ID: 33679629
You can try this script, I am not sure whether it will resolve you issue but you can try once
The existing script has some logic to deal with a UPN if the domain is not present, the problem is that the users upn is not the same as the domain so it fails.  To get around the problem you can replace the code that looks like this:

set pUser = Server.CreateObject("IIS.PwdChg")

if Not IsObject(pUser) then

       set pUser = GetObject("WinNT://" & domain & "/" & username & ",user")

       if Not IsObject(pUser) then

              set root = GetObject("WinNT:")

              set pUser = root.OpenDSObject("WinNT://" & domain & "/" & username & ",user", username, Request.Form("old"),1)

              Response.Write "<!--OpenDSObject call-->"

       end if

else

       pUser.Domain = domain

       pUser.User = username

       pUser.UPN = upn_name

end if

 

With

 

Set PUser = Createobject("ADSystemInfo")

Set  Root = GetObject("LDAP:")

Set Puser = Root.OpenDSObject("LDAP://" & pUser.Username, Request.Form("Acct"), Request.Form("old"),1)

 

To ensure that it works correctly the domain field has to be empty and the account should be entered as the e-mail address.  I would recommend that you change the page to reset the domain field to “” and to ensure the username has an @ in it.  Otherwise this will work.

Also have a look at this MS article about password change problem
http://support.microsoft.com/?id=894825

Good Luck}
0
 

Author Closing Comment

by:KratosDefense
ID: 33803485
thxs
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Debug Tools to analyse IIS process: This article focus on taking memory dumps from IIS to determine which code is taking more time and to analyse which calls hangs/causes more CPU usage. To take dumps,download the following. Install1: To st…
If you don't have the right permissions set for your WordPress location in IIS, you won't be able to perform automatic updates. Here's how to fix the problem.
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question