How To: Force a Password Change at Next Logon During a Helpdesk Password Reset

Version Affected: All

 

Overview

This article explains how to force a user to change their password at their next logon, when a Helpdesk operator resets that user's password through a Helpdesk realm.

Force a Password Change at Next Logon During a Helpdesk Password Reset

Sometimes a Helpdesk operator resetting a user's password also needs to set the User must change password at next logon attribute on that user's Active Directory account.

1. Open the Helpdesk realm's System Info tab in the Web Admin console and click Decrypt.
2. Open Windows Explorer and browse to the realm's folder — for example D:\SecureAuth\SecureAuthxx, where xx is the realm number.
3. Open the realm's web.config file in a text editor.
4. Find the line starting with <add key="MembershipMustChangePassword".
5. Set the line to read: <add key="MembershipMustChangePassword" value="True" />
6. Save and close web.config.

Special Considerations

Normal Active Directory requirements still apply. For example, this setting will not force a password change if the user's Active Directory account has Password never expires selected.


 

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.