Password Change Options

You can change password change options by selecting the appropriate values and clicking the “Save Program Features” button.

•Allow users to change their own passwords using the web interface – Check this box to allow users to log into the Account Reset Console and change their own passwords. Users will still need to be a member of a group with login permissions to the Account Reset Console. If you do not select this checkbox, users clicking “Change My Password” will receive a message that the option has been disabled by their system administrators.

•When users change their own passwords, expire them so that they must be changed on next login – By default, if a user changes their own password, the Account Reset Console resets the password expiration date. Checking this box will force the user to reset their password the next time they log into the domain (NOT the next time they log into the Account Reset Console).

•Allow lost password recovery through ARC (via ID verification) – Check this box to allow users to answer identifying questions to reset their passwords. Checking this box will cause the “Reset Password” button to appear on the login page of the Account Reset Console.

•Allowed wrong answers – The number of verification questions the user can answer incorrectly before a wrong answer causes the verification attempt to fail.

•Display the following HTML message to users resetting their own passwords – check this box to display an HTML message to users personnel using the “Change My Password” page to reset their own passwords. This message might include warnings, procedural notes, or company policy.

•Email users notifications that their passwords have been reset – Check this box to send a notification email to users when they change their own password. You may enter the text of the email message in the textarea below this checkbox. You can use wildcards to specify fields to automatically fill in:

o #RealName# - the real name of the user, as stored in Active Directory. o #UserName# - the user’s username.

o #Email# - the email address of the user, as stored in Active Directory.

•Email the help desk a notification when a user resets their own password – Check this box to send a notification email to the help desk when any user resets their own password using the Account Reset Console. You can enter the text of the email and the Help Desk email address below the checkbox. You can use wildcards to specify fields to automatically fill in:

o #RealName# - the real name of the user, as stored in Active Directory. o #UserName# - the user’s username.

o #Email# - the email address of the user, as stored in Active Directory.

•Save Program Features – click this button to save the changes you have made.

Note that the values are not saved until you have clicked the “Save Program Features” button.