Archive | Windows Server 2008 RSS feed for this section

A Workaround in IIS 7 for the “User Must Change Password at Next Logon” Flag in Active Directory

In yesterday’s post we looked at an issue with the IIS 7 architecture where Windows and Basic authentication fail when the “User must change password at next logon” flag is set for an Active Directory user. Microsoft engineered IIS 7 to deny access to users who have this flag set. This change from previous versions of [...]

Read full story Comments { 1 }

A Replacement for IISADMPWD in IIS 7

Many organizations have employed Microsoft’s IISADMPWD tool to allow password changes in Active Directory for web applications. Originally intended as the way to change passwords for access in Outlook Web Access (OWA), IISADMPWD became quite a useful solution for any organization that wanted to delegate access to AD password changes via a web application. With [...]

Read full story Comments { 2 }

Adding Windows Computer Accounts from Active Directory to NTFS ACLs to Control Permissions

When writing web applications, you often must grant permissions to an application to do something on other machines in a Windows domain or forest. IIS 6, 7 and 7.5 all allow you to configure IIS application pools to run under specific, rather secure identities like NETWORK SERVICE and the Application Pool Identity. When accessing resources [...]

Read full story Comments { 0 }

Run IIS Web Applications on a Windows Member Server and Not a Domain Controller

Most of our software products run on Microsoft’s IIS web server. In our product installation guides, we specify in the system requirements to install our web applications on a member server instead of a domain controller. Recently, a prospect asked us why we recommend this since WebAD products connect to Active Directory. Is it really a best [...]

Read full story Comments { 0 }

PowerShell Hosting in ASP.NET: Resolving Errors with PowerShell Set-ExecutionPolicy

One of the great innovations in Windows PowerShell is the ability to host the PowerShell run-time environment in any number of run-time hosts. We use this capability to host PowerShell in an ASP.NET web application process for our PeopleProvision solution. Everything works great once you get over a couple of big security hurdles. File SomePowerShellFile.ps1 [...]

Read full story Comments { 1 }

Check “User must change password at next logon” Flag in Active Directory

I posted about Microsoft’s IISADMPWD tool and IIS 7 issues recently. The IISADMPWD tool allows Active Directory users to change AD password in versions of IIS prior to IIS 7 and the primary intent of this tool is to allow Outlook Web Access users before Exchange 2007 to change their AD password. Changes to IIS [...]

Read full story Comments { 1 }

IISADMPWD: IIS 7 Authentication with “User must change password at next logon” Flag Set in Active Directory

We’re working with a customer to replace the Microsoft IISADMPWD tool the customer uses to allow Active Directory password changes in their hosted software offering. This tool, a legacy ASP application that runs on IIS 5 and 6, has been around for a while to allow AD password changes using OWA, Outlook Web Access. Beginning [...]

Read full story Comments { 2 }

Auto Enrollment for Windows Self-Service Password Reset

We are pleased to announce that our engineers came up with exactly that, a data import utility that can use your existing data to pre-enroll users. This is available to all of our existing PeoplePassword customers, or as an add-on feature for our new customers.

Read full story Comments { 0 }

ARGH! Microsoft, Why do you vex me?

So a little background.  After a power failure and realizing that my DNS server for my ESX/vSphere cluster was a virtual machine and that VMware ESX clusters and a lack of DNS don’t work well I decided to add to move DNS to a physical server in my environment. I loaded the DNS server on [...]

Read full story Comments { 0 }

Microsoft Problem Steps Recorder for Windows 7

If you are a Windows 7 or Windows Server 2008 user, this utility might be useful to you.  Problem steps recorder allows you record the activities leading up to a problem, then save that to a mht file that you can send to support.  If you have an error on an IIS application (yellow screen) [...]

Read full story Comments { 0 }