Windows Auth, MUST change password

Ask a Question related to ASP.NET Security, Design and Development.

  1. #1

    Default Windows Auth, MUST change password

    If a user's password expires or an admin otherwise set the "user must change
    password" flag it appears that a user can no longer access the web site.

    Is this by design? This means I cannot enforce a password expiration policy
    for web site users. Bummer! Are there any IIS metabase settings that could
    be of help here?

    Thanks
    Rich







    Rich Guest

  2. Similar Questions and Discussions

    1. Forms Auth Info passed to Windows Auth?
      The requirement is to build an ASP.Net intranet application, so external users can log in to the main web portal via forms authentication, using...
    2. AD password policy in Forms auth against AD
      Hey! I've successfully followed Microsofts example on how to use Forms authentication with Active Directory (from the "Building Secure ASP.NET...
    3. User must change password at next logon - Windows 2003 AD issue
      The "User must change password at next logon" box is no longer available to our help desk. Delegation is set up to allow them to change the...
    4. question on windows auth
      Hi I am working on an intranet application. I am using windows integrated authentication. Now since the authentication is done by active directory...
    5. Configuring Windows Auth & Forms Auth in Asp.Net
      Configuring Windows Auth & Forms Auth in Asp.Ne Hi, I've configured a web app to use windows authentication and also set up two separate...
  3. #2

    Default Re: Windows Auth, MUST change password

    answering my own post

    [url]http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/q269/0/82.asp&NoWebContent=1[/url]

    "Rich" <rmorrison@-greystone.com> wrote in message
    news:ukxEwFwcDHA.3708@tk2msftngp13.phx.gbl...
    > If a user's password expires or an admin otherwise set the "user must
    change
    > password" flag it appears that a user can no longer access the web site.
    >
    > Is this by design? This means I cannot enforce a password expiration
    policy
    > for web site users. Bummer! Are there any IIS metabase settings that could
    > be of help here?
    >
    > Thanks
    > Rich
    >
    >
    >
    >
    >
    >
    >

    Rich Guest

Posting Permissions

  • You may not post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139