•Reset Password through Account Reset Console – check this box to allow user passwords to be reset during account reset. If this box is not checked,
•Allow Help Desk to view user identity information – check this box to allow access to the “Look Up User Data” menu item. This allows members of Administrative Groups to view the identity verification answers for members of Managed Groups.
•Enabled disabled accounts – allows the admin to configure whether or not the “disabled” flag is reset when the account is reset. If set to “Always”, the account is always
•Unlock locked accounts – allows the admin to configure whether or not the “locked” flag is reset when the account is reset. If set to “Always”, the account is always unlocked. If set to “Never”, the account is never unlocked (it stays in whatever state it was in before being reset). If set to “Optional”, the help desk user is given the option to either unlock it or leave it in the state it was in before being reset.
•Require that reset passwords be changed on next login – allows the admin to configure whether or not the “expired” flag is reset when the account is reset. If set to “Always”, the account password is always expired when reset, so that the user has to change the password when they next log in. If set to “Never”, the account is un- expired, so that the user does not have to reset their password when they next log in. If set to “Optional”, the help desk user is given the option to either expire or
•Display the following HTML message to Help Desk personnel resetting accounts
– check this box to display an HTML message to Help Desk personnel using the “Reset User Account” page to reset a user account. This message might include warnings, procedural notes, or company policy.
•Email users notifications that their passwords have been reset – check this box to send an email to users when their accounts have been reset. You may enter the text of the email message in the textarea below this checkbox. You can use wildcards to specify fields to automatically fill in:
o #RealName# - the real name of the user, as stored in Active Directory. o #UserName# - the user’s username.
o #Email# - the email address of the user, as stored in Active Directory.
•Save Program Features – saves the selections you have made.
Set Password Change Features
Overview
The Account Reset Console can be configured to allow users to change their own passwords, reset their passwords by verifying their identity through a
User password change settings are located under the “Management” menu item, in the “Password Change Features” tab. User password change settings can be managed by users with “Manage All Web Access Controls” privileges.
Page 56 of 94 - Administration Manual - Copyright 2007 - Lieberman Software Corporation - All Rights Reserved
