Password Reset Utility

 

Overview:

With HelpSTAR 2012’s Password Reset Utility, you can eliminate the most common type of request logged to your help desk.  You can allow your end users to reset their password directly from the Windows interface.

 

 

 

Part 1: Password Reset Utility Administration

 

Before your end users can begin to use the Password Reset Utility functionality, you must first configure the utility for use.  Note, only used with the Access Control role will be able to administer this utility.

 

 

To administer the Password Reset Utility, perform the following:

1. On the HelpSTAR deployment server, open the following file:

2. \HelpSTAR\HLPSTRCS\INSTALL\HSETUPCS.INI

3. Once this file is open, you will see a file similar to the one below.  If the Password Reset Utility is installed, you will find the location for the Password Reset Administration page in the following entry:

   [HSPasswordReset]

   VirPath = Password Reset Administration Page

   

    

4. Copy and Paste this entry to a browser.  The login page for Password Reset Administration will open.  Enter your credentials and click on Login.

   

    

5. On the Configure Settings tab, confirm the following settings:

   1.  

   2. Questions & Answers:

      • Number of Challenge Questions – Specify the number of questions a user must correct answer to allow them to reset their passwords.

      • Characters to Answer the Question – Specify the minimum length of characters required for each answer to a challenge question.

      • Allow Hint – Specify if you want to allow or block end users hints to complete their challenge questions.

   3.  

   4. Block User:

      • Block Users who fail Authentication–Set the ability to block users from re-attempting to reset their password regardless of how many failed attempts they have made.

      • Maximum number of invalid attempts – Set how many attempts an end user has to reset their passwords.  Also, set the time period that must lapse before an end user can make another attempt to reset his/her password.

      • Block User for –Set the time period a user is blocked from re-attempting a password reset.

      •  

   

    

6. On the Manage Users tab, confirm the following settings:

   1. Administrative Users – By default all privileged users with the Access Control role will be listed under the Primary Administrative Users list.  These users are able to login to the Password Reset Administration page and make changes to the settings.  Here, you can remove any users from this list to block them from being able to make any configuration changes to the Password Reset Utility. 

   2. Registered Users – View a list of users who have registered for the ability to reset their passwords.  To remove a user from this list, highlight a user and click on Unregister.

   Locked Out Users – View a list of users who have been locked out of the Password Reset Utility.  To allow them to make another attempt, highlight a user and click on Unlock.

7.  

   

    

   Note: The Manage Users tab will appear only for users who have been specified as Primary Administrative Users.  Administrative Users will only have access to the Configure Settings tab upon login.

    

8. To save your settings, click on the Save button.  Then, click on Logout to exit the Password Reset Administration page.

 

Part 2: End User Password Reset Utility Registration

 

Before your end users can reset their password via this utility, they must first complete a registration.

There are 2 ways that your end user can register for the Password Reset utility:

1. Automatic Registration via Group Policy – A Group Policy can be created to automatically launch the registration page once a user logins to a workstation.For more information on how the creation of this Group Policy, click on the following links:

   Granting Delegation to the Web Account

   Server 2003

   • Installing/Uninstalling Client-Side Components Through GPO

   • User Logon Script

          Server 2008

•             Installing/Uninstalling Client-Side Components Through GPO

•             User Logon Script

   

1. Manual Registration – If you do not implement a Group Policy to automatically launch the registration, you can redirect your end users to register manually via the following link mentioned in the virtual path referenced in Part 1:

   http://{Virpath}/registeruser.aspx

 

To register for access to HelpSTAR’s Password Reset Utility, perform the following:

1. Once the registration page is launched, you will see the window below:

2. 

   Your login name/domain should be entered by default.  Enter your current password.

3. Select the Challenge Questions that you will be prompted with should you need to reset your password.   Provide an answer/hint to save changes.

4. Once you have completed entries, click on Save to complete the changes. 

5. You will receive a confirmation page once your changes have been saved.  Click on Close to exit the registration.

6. 

    

 

Part 3: Resetting your Windows Password

 

Once an end user has become a registered user for HelpSTAR’s Password Reset Utility, they can reset their Windows credentials. Note that the following instructions are for environments where a Group Policy has been implemented for the Password Reset Registration.

To reset your credentials, perform the following:

1.  

2. On the Windows login screen, click on the Forget Password link.

3.  

4.  

5. Once the Log On to Windows prompt opens, click on the Forgot my password button.

6.  

    

7. You will be prompted to confirm your login credentials.  Click on Next to proceed.

8.  

   

    

    

9. You will be prompted with the Challenge Questions selected in Part 2.  Enter your answers correctly to proceed.  Click on Next to verify your answers.

   

    

    

10. Once your Challenge Questions and answers have been verified, enter and confirm your new password.  Click on Reset to change your password.

    

     

     

     

11. Once your password has been successfully reset, you will receive a confirmation.  Click on Close to exit the utility.

    

 

 

Part 4: Resetting a Windows Password via the Windows Client

 

The ability to reset a user’s password has also been added to the Windows Client.

 

In order to be a Password Reset Administrator in HelpSTAR, the following prerequisites are required:

•          Active Directory Synchronization must be enabled and configured in HelpSTAR.

•          The Password Reset Administrator must be logged into HelpSTAR using Active Directory pass through authentication.

•          The Password Reset Administrator must be delegated the task of “Reset user passwords and force password change at next logon” in Active Directory.

•          The Password Reset Administrator must be granted the Access Control role in HelpSTAR.

•          The Password Reset Administrator must be designated as a Primary Administrative User via the Password Reset Administration console (as shown on page 6).

 

To reset credentials for another user, perform the following:

1.       On the File menu of HelpSTAR, click on the Find option.  The following screen will open:

            

2.       Click on a User search filter to find the user whose password you wish to reset.  The Find a User window will open.

            

3.       Search for a user and highlight the desired user.  To view a user’s properties, double-click the user or select the User History button in the toolbar.  The User Properties window will open.

           

4.       In the Manage User task group, click on the Reset Password option.

            

 

5.       In the following prompt, enter the new password.  Click on Reset to change the password for this user.

            

            Note: Password complexity rules outlined in Active Directory will be enforced.

 

6.       You will receive a confirmation prompt once completed. 

            

 

 

Part 5: Password Reset Utility Reports

 

Once the Password Reset Utility is installed and has been used in your environment, you can then generate reports related to password resets. 

 

To generate reports, perform the following:

1.       On the File Menu of HelpSTAR, click on the Data Analysis option.  The following screen will open:

            

1.       Select the Standard Reports option.

2.       Once the Standard Reports window opens, select one of the two available reports under the Listing group:

            a.      Password Reset Enrolled Users – listing of any users who have completed the Password Reset registration.  This process is outlined on page 8.

            b.      Password Reset Locked Out Users – listing of any users who have exceeded allotted attempts to reset their passwords.

 

 

 

Back to top 

See also:

Web Components Installation