Archive | Windows Server 2008 R2 RSS feed for this section

A Workaround in IIS 7 for the “User Must Change Password at Next Logon” Flag in Active Directory

In yesterday’s post we looked at an issue with the IIS 7 architecture where Windows and Basic authentication fail when the “User must change password at next logon” flag is set for an Active Directory user. Microsoft engineered IIS 7 to deny access to users who have this flag set. This change from previous versions of [...]

Read full story Comments { 1 }

A Replacement for IISADMPWD in IIS 7

Many organizations have employed Microsoft’s IISADMPWD tool to allow password changes in Active Directory for web applications. Originally intended as the way to change passwords for access in Outlook Web Access (OWA), IISADMPWD became quite a useful solution for any organization that wanted to delegate access to AD password changes via a web application. With [...]

Read full story Comments { 2 }

Adding Windows Computer Accounts from Active Directory to NTFS ACLs to Control Permissions

When writing web applications, you often must grant permissions to an application to do something on other machines in a Windows domain or forest. IIS 6, 7 and 7.5 all allow you to configure IIS application pools to run under specific, rather secure identities like NETWORK SERVICE and the Application Pool Identity. When accessing resources [...]

Read full story Comments { 0 }

Run IIS Web Applications on a Windows Member Server and Not a Domain Controller

Most of our software products run on Microsoft’s IIS web server. In our product installation guides, we specify in the system requirements to install our web applications on a member server instead of a domain controller. Recently, a prospect asked us why we recommend this since WebAD products connect to Active Directory. Is it really a best [...]

Read full story Comments { 0 }

PowerShell Hosting in ASP.NET: Resolving Errors with PowerShell Set-ExecutionPolicy

One of the great innovations in Windows PowerShell is the ability to host the PowerShell run-time environment in any number of run-time hosts. We use this capability to host PowerShell in an ASP.NET web application process for our PeopleProvision solution. Everything works great once you get over a couple of big security hurdles. File SomePowerShellFile.ps1 [...]

Read full story Comments { 1 }

Active Directory Provisioning with PowerShell: Extensibility and Power without Costly Implementation (Part 4 of 4)

We’ve been looking this week at Web Active Directory’s new PeopleProvision solution for automating and delegating the Active Directory account creation process. Today we present the final post of our blog series and look more closely at PowerShell’s role in the PeopleProvision platform. PowerShell empowers PeopleProvision to deliver the most business value by providing extensibility and [...]

Read full story Comments { 3 }

Active Directory Provisioning with PowerShell: Extensibility and Power without Costly Implementation (Part 3 of 4)

This is Part 3 of Web Active Directory’s blog post series highlighting our new PowerShell-enabled platform. We introduced the series with an exam of how other software vendors approach provisioning with costly implementation services and then looked at WebAD’s PeopleProvision solution more closely. In this post, we look at how easy it is to implement [...]

Read full story Comments { 3 }

Active Directory Provisioning with PowerShell: Extensibility and Power without Costly Implementation (Part 2 of 4)

We are taking a look at Web Active Directory’s new PowerShell-enabled platform this week in a series of blog posts. We introduced the series by discussing how many software companies like to squeeze every red cent from their customers by using proprietary technologies that require costly implementation services. This post introduces WebAD’s PeopleProvision tool to [...]

Read full story Comments { 3 }

Check “User must change password at next logon” Flag in Active Directory

I posted about Microsoft’s IISADMPWD tool and IIS 7 issues recently. The IISADMPWD tool allows Active Directory users to change AD password in versions of IIS prior to IIS 7 and the primary intent of this tool is to allow Outlook Web Access users before Exchange 2007 to change their AD password. Changes to IIS [...]

Read full story Comments { 1 }

IISADMPWD: IIS 7 Authentication with “User must change password at next logon” Flag Set in Active Directory

We’re working with a customer to replace the Microsoft IISADMPWD tool the customer uses to allow Active Directory password changes in their hosted software offering. This tool, a legacy ASP application that runs on IIS 5 and 6, has been around for a while to allow AD password changes using OWA, Outlook Web Access. Beginning [...]

Read full story Comments { 2 }