Help & FAQs    Search BCF    Members    Groups    Events Calendar
Resend my activation email : Register : Log in 
BCF: Bike Chat Forums


WebGUI for resetting AD passwords

 Reply to topic
Bike Chat Forums Index -> The Geek Zone
View previous topic : View next topic  
Author Message

SQL
World Chat Champion



Joined: 08 Aug 2012
Karma :
PostPosted: 11:19 - 20 Jun 2015    Post subject: WebGUI for resetting AD passwords Reply with quote
Hi Guys,

tl;dr I want a webGUI that can reset AD passwords halp

-----------------------------------------------------------------------------

I have knocked up a front end for someone that wants to be able to reset users AD passwords from a webGUI.

The site is basically a form with 3 boxes and a submit button, I want to be able to reset AD passwords from this form for example.

Username [DOGE]
Password [DogetheD0g123]
Security checksum [Somethingherehaventworkeditoutyet]

Submit

Has anyone on here attempted to do this? the end goal is that users will be able to reset their passwords without even coming in the office, just using a tablet/laptop, mounted on a wall.

Is it possible to make a form that will submit the data as code into powershell?

Is possible? Is not possible?

Many thanks, much wows.

SQL

P.S I am not asking someone to code it for me just a general nudge into the correct direction would be fantastic.
 Back to top
View user's profile Send private message Visit poster's website You must be logged in to rate posts

B0ndy
Spanner Monkey



Joined: 25 May 2015
Karma :
PostPosted: 11:47 - 20 Jun 2015    Post subject: Re: WebGUI for resetting AD passwords Reply with quote
SQL wrote:
Hi Guys,

tl;dr I want a webGUI that can reset AD passwords halp

-----------------------------------------------------------------------------

I have knocked up a front end for someone that wants to be able to reset users AD passwords from a webGUI.

The site is basically a form with 3 boxes and a submit button, I want to be able to reset AD passwords from this form for example.

Username [DOGE]
Password [DogetheD0g123]
Security checksum [Somethingherehaventworkeditoutyet]

Submit

Has anyone on here attempted to do this? the end goal is that users will be able to reset their passwords without even coming in the office, just using a tablet/laptop, mounted on a wall.

Is it possible to make a form that will submit the data as code into powershell?

Is possible? Is not possible?

Many thanks, much wows.

SQL

P.S I am not asking someone to code it for me just a general nudge into the correct direction would be fantastic.


I created something like this many moons ago, however my small web app was a complete self-service portal allowing users to change their AD attributes, update their company photo (thumbnailPhoto LDAP attribute) and a range of other cool things.

My first question would be do you only need a site so users can reset their AD passwords or do you need a self service portal, i.e are you going to want develop the webGUI further in the future? If the answer is no I suggest you consider a off the shelf solution, many exist and have solved this very problem already.

An example of a product that does this well in my opinion:
https://www.manageengine.com/products/self-service-password/

If you are going to develop the site in the future I suggest a small web app using ASP.NET MVC or Webforms written in either C# or VB.net (go with C# for the language and choose ASP.NET MVC for the framework, Webforms is a dieing technology).

Quote:
Is it possible to make a form that will submit the data as code into powershell?


I don't believe there is a way of doing this and even if there was I don't believe it's the right approach.

Quote:
Is possible? Is not possible?


Very possible but will take some time to develop properly, as already suggested I would seriously consider an off the shelf solution if you just need to give users the ability to reset their password.

Last thing is that an important consideration to make is how to verify the person changing the accounts password is genuinely the owner of the account, the way I've done this in the past is to store both the users personal email address (for verification and alerting purposes) and 3 security questions and answers of their choice in a Database, that way when someone requests a password reset the webapps logic can verify it's the account owner.

I have all the source code for the self service portal I did a while ago on a memory stick somewhere if you would like me to send it across so you can take alook.
____________________
CBF 125 -> CB400SF -> GSX600F -> ZX6R (G1) -> GSXR1000 K4 -> ZX6R (B1H Stunt bike) -> VFR800 -> R1 5PW -> Sprint 1050 -> Fireblade 929 -> ZX10R C2H -> GSXR1000 K3
 Back to top
View user's profile Send private message You must be logged in to rate posts

SQL
World Chat Champion



Joined: 08 Aug 2012
Karma :
PostPosted: 15:14 - 20 Jun 2015    Post subject: Reply with quote
It will eventually become more than just passwords, I want to do this as a webapp style. The current implementation is shocking.

If you could send the source that would be great if you have it, I did look at the "off the shelf" product however the customisation was quite limited.
 Back to top
View user's profile Send private message Visit poster's website You must be logged in to rate posts

chris-red
Have you considered a TDM?



Joined: 21 Sep 2005
Karma :
PostPosted: 15:30 - 22 Jun 2015    Post subject: Reply with quote
We use this, https://www.anixis.com/ Depending on the users you have it may be cheaper to buy it in rather than spend the time writing it.
____________________
Well, you know what they say. If you want to save the world, you have to push a few old ladies down the stairs.
Skudd:- Perhaps she just thinks you are a window licker and is being nice just in case she becomes another Jill Dando.
WANTED:- Fujinon (Fuji) M42 (Screw on) lenses, let me know if you have anything.
 Back to top
View user's profile Send private message You must be logged in to rate posts

CaNsA
Super Spammer



Joined: 02 Jan 2008
Karma :
PostPosted: 17:09 - 22 Jun 2015    Post subject: Reply with quote
Does spiceworks not tie in with AD ?
 Back to top
View user's profile Send private message You must be logged in to rate posts

SQL
World Chat Champion



Joined: 08 Aug 2012
Karma :
PostPosted: 17:54 - 22 Jun 2015    Post subject: Reply with quote
May have solved this accidentally, as we are currently upgrading to AAD and going to be moving from FIM to MIM there seems to be a BYOD solution built in.

However I feel it would still be beneficial while we wait for the upgrade as that could be 2016 at some point (I think).

As for buying something in we have over 2k users so gets expensive quickly the powers that be won't see that us manually resetting passwords is enough to justify a cost, if it ain't broke don't fix it and all that, however half of our calls are password related so as a project I wanted to do this.

Cansa as for AD tying in with spiceworks not quite sure where you are going with that is there a self service portal with spiceworks?

That could be interesting as we do currently have spiceworks however I don't manage it.
 Back to top
View user's profile Send private message Visit poster's website You must be logged in to rate posts

CaNsA
Super Spammer



Joined: 02 Jan 2008
Karma :
PostPosted: 18:17 - 22 Jun 2015    Post subject: Reply with quote
SQL wrote:
Cansa as for AD tying in with spiceworks not quite sure where you are going with that is there a self service portal with spiceworks?

That could be interesting as we do currently have spiceworks however I don't manage it.


Yes there is.

Chuck this little ballache of a project over to the Spiceworks guys Thumbs Up
 Back to top
View user's profile Send private message You must be logged in to rate posts

SQL
World Chat Champion



Joined: 08 Aug 2012
Karma :
PostPosted: 18:38 - 22 Jun 2015    Post subject: Reply with quote
CaNsA wrote:
SQL wrote:
Cansa as for AD tying in with spiceworks not quite sure where you are going with that is there a self service portal with spiceworks?

That could be interesting as we do currently have spiceworks however I don't manage it.


Yes there is.

Chuck this little ballache of a project over to the Spiceworks guys Thumbs Up


I shall investigate, do you know whats it called, all I can find referenced is Manage Engines AD Self Service only licences up to 50 people free, is there something native in Spiceworks so I can go to them install "X" module please, If you don't know thats cool, Ill drop our spiceworks contact an e-mail as we only use spiceworks for server reporting according to the dudes that manage it..
 Back to top
View user's profile Send private message Visit poster's website You must be logged in to rate posts

CaNsA
Super Spammer



Joined: 02 Jan 2008
Karma :
PostPosted: 19:01 - 22 Jun 2015    Post subject: Reply with quote
SQL wrote:
I shall investigate, do you know whats it called, all I can find referenced is Manage Engines AD Self Service only licences up to 50 people free, is there something native in Spiceworks so I can go to them install "X" module please, If you don't know thats cool, Ill drop our spiceworks contact an e-mail as we only use spiceworks for server reporting according to the dudes that manage it..


I'm trying to remember the name of the spiceworks plugin i used a few years back, but alas... my memory fails me.

I'll have a dig about later and see if i can find it.
 Back to top
View user's profile Send private message You must be logged in to rate posts

SQL
World Chat Champion



Joined: 08 Aug 2012
Karma :
PostPosted: 22:15 - 22 Jun 2015    Post subject: Reply with quote
CaNsA wrote:
SQL wrote:
I shall investigate, do you know whats it called, all I can find referenced is Manage Engines AD Self Service only licences up to 50 people free, is there something native in Spiceworks so I can go to them install "X" module please, If you don't know thats cool, Ill drop our spiceworks contact an e-mail as we only use spiceworks for server reporting according to the dudes that manage it..


I'm trying to remember the name of the spiceworks plugin i used a few years back, but alas... my memory fails me.

I'll have a dig about later and see if i can find it.


Cheers Pal
 Back to top
View user's profile Send private message Visit poster's website You must be logged in to rate posts
Old Thread Alert!

The last post was made 10 years, 228 days ago. Instead of replying here, would creating a new thread be more useful?
  Display posts from previous:   
This page may contain affiliate links, which means we may earn a small commission if a visitor clicks through and makes a purchase. By clicking on an affiliate link, you accept that third-party cookies will be set.

Post new topic   Reply to topic    Bike Chat Forums Index -> The Geek Zone All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum

Read the Terms of Use! - Powered by phpBB © phpBB Group
 
Debug Mode: ON - Server: birks (www) - Page Generation Time: 0.08 Sec - Server Load: 0.47 - MySQL Queries: 13 - Page Size: 71.07 Kb