Solved

Password policy for VPN usersQuestion:

Posted on 2011-09-22
2
249 Views
Last Modified: 2012-05-12

Hello,  I want to implement a strong password policy for our remote user who use vpn to access our network.  The problem I am having is that when it comes time to change their password they don't get a chance because the cisco vpn client wants the new password.  They then have to call us and we then change their password and then they can log in.   I have done some searches and from what I found is that I need to get a third party software to remind users to change their password before the actual due date.  Does anyone know a better way?  I figure that there are a lot of remote users out there who have to change their passwords all the time.  NOTE: We have a windows 2003 domain and the users have Windows 7 Ultimate/Enterprise.

Thanks,

Billl
0
Comment
Question by:bjennings
2 Comments
 
LVL 18

Accepted Solution

by:
jmeggers earned 400 total points
ID: 36584159
This can be done with Cisco ACS using RADIUS.  The user is notified their password is expiring and they are able to enter a new password.  I'd have to hunt for the documentation but I'm sure it's in the ACS docs.  But I believe you are correct -- without something like ACS and RADIUS, the sysadmin would have to set the new password for the user.
0
 

Author Closing Comment

by:bjennings
ID: 36601566
Thanks for your help!
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question