How do I configure the Web Console so the 'User must change password at next logon' flag is always checked when a password is reset?
Directory and Resource Administrator 6.x
Directory and Resource Administrator 7.x
To ensure that the 'User must change password at next logon' flag is always checked when resetting a user accounts password in the Web Console, the Web Console must be customized.Â The following customization must be made on all IIS servers running the Directory and Resource Administrator (DRA) Web Component:
- Launch Windows Explorer on the IIS server.
- Browse to the following directory:
- Copy the Properties.asp page.
- Paste the Properties.asp page to the following directory:
- HighlightÂ the file, right click, and select Edit.
- Modify the file as follows, and save. Put the code right above the line that contains "ADUtil.SetInfoSafe":
If Not ADUtil.PutPropertySafe(User, "$McsUserMustChangePassword", True, "boolean", sErrorMsg) then
Â SaveChanges = False
Â Exit Function
The above steps must either be performed on all IIS servers running the DRA Web Component or you can copy the modified Properties.asp file to the \Inetpub\wwwroot\DRAWeb\WebConsole\Custom\AccountManagement\Users\UserResetPassword directory on all other IIS servers.
The Assistant Admin performing the Password Reset operation using the Web Console must have the 'Whether User Must Change Password at Next Logon' power.Â The 'User must change password at next logon' field will be exposed when the Assistant Admin performs the Password Reset operation, and the Assistant Admin will be able to check\uncheck the flag.Â However, if the Assistant Admin unchecks the flag, the customization made above will ensure that the flag is checked when the password is reset.