Click here to get back home

Simple user/password management?

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Simple user/password management? Franc 07-06-2005
Get Chitika Premium
Posted by Franc on July 7, 2005, 7:35 am
Please log in for more thread options
Why must there be an easy way?? Because I'm in a pickle!! That's why!

It's purely a political issue, Olaf. I work for a government agency, and
our server envirnment is AIX. Our Windows servers are generally for special
needs - departmental file servers, print servers, and/or Web servers. The
agency has pretty much forbidden us to set our Win servers up a domain
controllers for fear of directory interference. Personnaly, I don't think
it's a big issue, but it's not my call, and much too big a battle for me to
take on. I'm sure you've been there. I'm certainly aware of, and appreciate
the niceties, and convenience of implementing a domain controller.

So, I'm merely trying to make the best of all worlds. That's not generally
the easy way.

I read a little about Remote Desktop yesterday, but I'm not at all familiar
with the implementation. I got the feeling that clients would be required to
have Terminal Server CALs?? Most of this issue resides within the intranet,
so security might not be such a big issue. However, one Web server that we
use is completely dislocated in another region of the country.

In any case, I really appreciate your insight. If you can help me further,
I'll be listening.

Thanks again, Franc



"Olaf Engelke [MVP Windows Server]" wrote:

> Hi Franc,
> Franc wrote:
> > Isn't there a simple way for users to manage/change their passwords
> > on a 2K3 server? The clients are all Win2K, and the server is not a
> > domain controller. All the solutions I've seen that suggest using
> > the NT Security dialog/Change Password button don't work, apparently
> > because there's no domain to define. There must be an easy way that
> > I'm just overlooking. It used to be so simple.
>
> why _must_ there be an easy way?
> That is the difference between the Domain with central user management and
> the Workgroup with local management.
> If you prefer the local model let the users go to that server and change
> their passwords there. Or use remote desktop for this - but since this is
> mainly for administrative purposes I would consider this also a bad idea
> from the point of security.
> Where is the problem to use the server as Domain controller?
>
> Best greetings from Germany
> Olaf.
>
>


Posted by Olaf Engelke [MVP Windows Serv on July 7, 2005, 5:00 pm
Please log in for more thread options
Hi Franc,
Franc wrote:
> Why must there be an easy way?? Because I'm in a pickle!! That's
> why!

hihi

> It's purely a political issue, Olaf. I work for a government agency,
> and our server envirnment is AIX. Our Windows servers are generally
> for special needs - departmental file servers, print servers, and/or
> Web servers. The agency has pretty much forbidden us to set our Win
> servers up a domain controllers for fear of directory interference.
> Personnaly, I don't think it's a big issue, but it's not my call, and
> much too big a battle for me to take on. I'm sure you've been there.
> I'm certainly aware of, and appreciate the niceties, and convenience
> of implementing a domain controller.

> In any case, I really appreciate your insight. If you can help me
> further, I'll be listening.

Check here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;149176
Changing a Password from a Remote Windows Computer
Just found searching something else, so you are right and I was wrong ;-)
Hope this helps.
Best greetings from Germany
Olaf


Posted by Franc on July 7, 2005, 1:00 pm
Please log in for more thread options
No, Olaf, you weren't wrong. This solution doesn't work. I found it
yesterday, and was certain I'd found the fix. It certainly sounds like it
should work, but unfortunately, it doesn't. A Win2K client doesn't offer a
From textbox, only Domain, and the error that comes back is "The system
cannot log you on now because the doman 'servername' is not available."

This time I did send feedback to Microsoft about the incorrect information,
but that email probably took a trip to Mars.

Again, I thank you for your willingness to assist.

Best wishes,
Franc

"Olaf Engelke [MVP Windows Server]" wrote:

> Hi Franc,
> Franc wrote:
> > Why must there be an easy way?? Because I'm in a pickle!! That's
> > why!
>
> hihi
>
> > It's purely a political issue, Olaf. I work for a government agency,
> > and our server envirnment is AIX. Our Windows servers are generally
> > for special needs - departmental file servers, print servers, and/or
> > Web servers. The agency has pretty much forbidden us to set our Win
> > servers up a domain controllers for fear of directory interference.
> > Personnaly, I don't think it's a big issue, but it's not my call, and
> > much too big a battle for me to take on. I'm sure you've been there.
> > I'm certainly aware of, and appreciate the niceties, and convenience
> > of implementing a domain controller.
>
> > In any case, I really appreciate your insight. If you can help me
> > further, I'll be listening.
>
> Check here:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;149176
> Changing a Password from a Remote Windows Computer
> Just found searching something else, so you are right and I was wrong ;-)
> Hope this helps.
> Best greetings from Germany
> Olaf
>


Posted by Olaf Engelke [MVP Windows Serv on July 7, 2005, 10:49 pm
Please log in for more thread options
Hi Franc,
Franc wrote:
> No, Olaf, you weren't wrong. This solution doesn't work. I found it
> yesterday, and was certain I'd found the fix. It certainly sounds
> like it should work, but unfortunately, it doesn't. A Win2K client
> doesn't offer a From textbox, only Domain, and the error that comes
> back is "The system cannot log you on now because the doman
> 'servername' is not available."

dang, Windows 2000 - my last local server I upgraded last weekend and
clients I don't have since a longer time. Mybe I will install one on a
virtual machine, if I find time and disk space.

> This time I did send feedback to Microsoft about the incorrect
> information, but that email probably took a trip to Mars.

* grins *
Cheaper than the NASA projects I assume ...

Best greetings from Germany
Olaf



Similar ThreadsPosted
Downgrade BDC to simple server August 20, 2007, 2:13 am
Simple File Sharing question December 14, 2005, 10:26 pm
Simple question regarding Windows 2003 Firewall April 1, 2007, 11:35 pm
Password Management Issue July 11, 2005, 12:19 pm
Patch Management for Non-MS Products October 3, 2005, 1:13 pm
Re: Remote Computer Management December 7, 2005, 9:49 pm
User management issues July 20, 2006, 10:50 am
Securing management access? February 16, 2008, 7:52 am
DHCP Management and Windows Firewall January 3, 2006, 3:39 pm
FSRM remote management permissions June 11, 2007, 11:28 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap