Using Windows Authentication on IIS ASP pages

[bookouri]

I have several .asp pages on a 2003 server/IIS Web Server. I am using Windows Security to force users to logon when requesting the .asp pages. Everything works fine, the user gets a windows logon and can log on etc. But.. now they want me to have the users set their own passwords and time them out every XX months and let them re-set their passwords. However, If I take a user who can log on and set their user name so that the "user must change password on next logon" the user can not log on and gets no option to change their password. Is there any way I can allow these Web users to change their passwords online?

thanks for any suggestions.

 

[bdintegrations]

1)When the user is created using an ASP form, you can have the web app send out an email. The email will contain a link that will allow him to go directly to an asp page were they can create their initial password.
2)If a user knows his password is going to expire(a message on the home page can tell him), he can change it after he logs in.

3)If the password expires before the user has a chance to change it, he can click a link on the login page that will send the user an email. The email will contain a link that will allow him to go directly to an asp page were they can create a new password.

Big security issues to overcome but I don't think it is a problem for an asp page to change a user's password on a server/AD.



Business and Data Integrations

http://www.bdintegrations.com/

A Northern Virginia IT Service and Consulting Company

 

[bookouri]

I think I have IIS doing what I want it to do now. There are several steps required to get IIS6 configured properly.

A search on IISADMPWD will give turn up instructions if anybody else has the same problem.

>>How to use the IISADMPWD password change pages