Allowing Active Directory Password Change Through SMB SSL-VPN Appliance

03/26/2020 28 14679

DESCRIPTION:
Allowing Active Directory Password Change Through SMB SSL-VPN Appliance

RESOLUTION:

Feature

This article helps us in allowing active directory users to change their password on thier next logon.

1. Login to the SRA administration GUI
2. Go to Portal | Domain and edit the domain in which you want the users to change their password
3. Enable the option Allow password changes (requires access to AD server port 464 UDP)

 

Steps need on the Active Directory

1. Log into a domain controller with administrative access
2. Open "Active Directory Users and Computers" and create a group that you are going to allow password reset rights
3. Right click on any OU and a group that will contain the users who can change their password
4. Select "Delegate Control"

1. It will take you to a wizard, hit on next and select the user group that should be having the privileges for password change

1. After selecting click on next and enable the option reset user password and force password change at next logon

Result

Once the user tries to login to the NetExtender and if his password is expired, he will be asked to change his password