| Author | Messages | |
rezuma
Posts:82
 | | 07/28/2008 5:00 PM |
| Hi,
I need to implement a website containing a password reset “tool” for AD users that work outside our network.
Does anyone know of a web based tool-script or whatever that do this?
Rezuma
| | | |
| bdesmond
Posts:347
 | | 07/28/2008 9:01 PM |
| Given a couple afternoons, Joe Kaplan/Ryan Dunn's .net book, and a suitable ASP.Net book, you could build it yourself to do exactly what you want.
Thanks, Brian Desmond brian@briandesmond.com
c - 312.731.3132
On Mon, Jul 28, 2008 at 4:01 PM, Ramon Linan <Ramon.Linan@gst.com> wrote:
> Hi, > > > > I need to implement a website containing a password reset "tool" for AD > users that work outside our network. > > > > Does anyone know of a web based tool-script or whatever that do this? > > > > > > Rezuma >
| | | |
| sbradcpa
Posts:299
 | | 07/28/2008 9:09 PM |
| <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> With deepest humility and deep respect, (and no disrespect for Ramon either, he may be the greatest, most secure .net developer known to mankind), but is it always the right thing to build ones own app if one does not have the necessary security expertise/third party review to ensure that .net app is securely built?
On the pen test listserves, they basically haven't met a internally built web portal yet (and some third party vendor ones as well) that they can't use as a means to gain entrance to that network.
That will be an externally facing web app with a hook into some pretty important information, yes?
I would want that to be "a couple of afternoons and a review from a security team" if I were management in his firm.
Brian Desmond wrote: <blockquote cite="mid:6bf1a8b10807281759m6c70c1d0p1d32c5eac6b1edcd@mail.gmail.com" type="cite"> <div dir="ltr"> <div>Given a couple afternoons, Joe Kaplan/Ryan Dunn's .net book, and a suitable ASP.Net book, you could build it yourself to do exactly what you want.</div> <div><br clear="all"> Thanks,
Brian Desmond
<a moz-do-not-send="true" href="javascript:window.location.replace('ma'+'ilto:'+'brian'+'@'+'briandesmond'+'.com')">brian@briandesmond.com</a>
c - 312.731.3132
</div> <div class="gmail_quote">On Mon, Jul 28, 2008 at 4:01 PM, Ramon Linan <<a moz-do-not-send="true" href="javascript:window.location.replace('ma'+'ilto:'+'Ramon.Linan'+'@'+'gst'+'.com')">Ramon.Linan@gst.com</a>> wrote:
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0px 0px 0px 0.8ex; padding-left: 1ex;"> <div vlink="purple" link="blue" lang="EN-US"> <div> <div> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);">Hi,</span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);"> </span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);">I need to implement a website containing a password reset "tool" for AD users that work outside our network.</span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);"> </span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);">Does anyone know of a web based tool-script or whatever that do this?</span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);"> </span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);"> </span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);">Rezuma</span></p> </div> </div> </div> </blockquote> </div>
</div> </blockquote> </body> </html> List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
| | | |
| Tony
Posts:49
 | | 07/28/2008 9:19 PM |
| Or you could just buy an existing one. There are plenty 3rd party offerings out there, including Quest's Password Manager
http://www.quest.com/password-manager/
Tony
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Desmond Sent: Tuesday, 29 July 2008 1:00 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Password reset script-tool-util-etc
Given a couple afternoons, Joe Kaplan/Ryan Dunn's .net book, and a suitable ASP.Net book, you could build it yourself to do exactly what you want.
Thanks, Brian Desmond brian@briandesmond.com
c - 312.731.3132
On Mon, Jul 28, 2008 at 4:01 PM, Ramon Linan <Ramon.Linan@gst.com> wrote:
Hi,
I need to implement a website containing a password reset "tool" for AD users that work outside our network.
Does anyone know of a web based tool-script or whatever that do this?
Rezuma
| | | |
| bdesmond
Posts:347
 | | 07/28/2008 9:36 PM |
| It's a valid request in a lot of customer environments. Every customer makes that decision, but, if you hve a large remote workforce, your choices are somewhat limited.
Thanks, Brian Desmond brian@briandesmond.com
c - 312.731.3132
On Mon, Jul 28, 2008 at 8:13 PM, Brandon Shell <tshell@gmail.com> wrote:
> I would also question the need to allow password resets outside of the > domain. It may be a valid request, but I would fight it tooth and nail. > > > On Mon, Jul 28, 2008 at 9:07 PM, Susan Bradley, CPA <sbradcpa@pacbell.net>wrote: > >> With deepest humility and deep respect, (and no disrespect for Ramon >> either, he may be the greatest, most secure .net developer known to >> mankind), but is it always the right thing to build ones own app if one does >> not have the necessary security expertise/third party review to ensure that >> .net app is securely built? >> >> On the pen test listserves, they basically haven't met a internally built >> web portal yet (and some third party vendor ones as well) that they can't >> use as a means to gain entrance to that network. >> >> That will be an externally facing web app with a hook into some pretty >> important information, yes? >> >> I would want that to be "a couple of afternoons and a review from a >> security team" if I were management in his firm. >> >> >> Brian Desmond wrote: >> >> Given a couple afternoons, Joe Kaplan/Ryan Dunn's .net book, and a >> suitable ASP.Net book, you could build it yourself to do exactly what you >> want. >> >> Thanks, >> Brian Desmond >> brian@briandesmond.com >> >> c - 312.731.3132 >> >> On Mon, Jul 28, 2008 at 4:01 PM, Ramon Linan <Ramon.Linan@gst.com> wrote: >> >>> Hi, >>> >>> >>> >>> I need to implement a website containing a password reset "tool" for AD >>> users that work outside our network. >>> >>> >>> >>> Does anyone know of a web based tool-script or whatever that do this? >>> >>> >>> >>> >>> >>> Rezuma >>> >> >> List info : http://www.activedir.org/List.aspx List FAQ : >> http://www.activedir.org/ListFAQ.aspx List archive: >> http://www.activedir.org/ma/default.aspx > > >
| | | |
| sbradcpa
Posts:299
 | | 07/28/2008 9:42 PM |
| <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> Agreed. But I can at least go to the vendor and ask "So, hired any security firms to do a review?" :-)
Brian Desmond wrote: <blockquote cite="mid:6bf1a8b10807281833t2393f1car1c7a4925cf37a6fc@mail.gmail.com" type="cite"> <div dir="ltr"> <div>Fair enough. My experience as a consultant is that almost all of these self service password reset systems I see are homegrown. It's usually easier and cheaper to make it do exactly what you want (and that can be quite a workflow in complex enteprises) than to try and customize a third party tool. Whether or not the third party tool is built any better than something someone inhouse built is entirely debateable too.</div> <div> </div> <div>OWA has had this functionality since 5.5 at least. </div> <div><br clear="all"> Thanks,
Brian Desmond
<a moz-do-not-send="true" href="javascript:window.location.replace('ma'+'ilto:'+'brian'+'@'+'briandesmond'+'.com')">brian@briandesmond.com</a>
c - 312.731.3132
</div> <div class="gmail_quote">On Mon, Jul 28, 2008 at 8:07 PM, Susan Bradley, CPA <<a moz-do-not-send="true" href="javascript:window.location.replace('ma'+'ilto:'+'sbradcpa'+'@'+'pacbell'+'.net')">sbradcpa@pacbell.net</a>> wrote:
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0px 0px 0px 0.8ex; padding-left: 1ex;"> <div bgcolor="#ffffff" text="#000000">With deepest humility and deep respect, (and no disrespect for Ramon either, he may be the greatest, most secure .net developer known to mankind), but is it always the right thing to build ones own app if one does not have the necessary security expertise/third party review to ensure that .net app is securely built?
On the pen test listserves, they basically haven't met a internally built web portal yet (and some third party vendor ones as well) that they can't use as a means to gain entrance to that network.
That will be an externally facing web app with a hook into some pretty important information, yes?
I would want that to be "a couple of afternoons and a review from a security team" if I were management in his firm. <div> <div class="Wj3C7c">
Brian Desmond wrote: <blockquote type="cite"> <div dir="ltr"> <div>Given a couple afternoons, Joe Kaplan/Ryan Dunn's .net book, and a suitable ASP.Net book, you could build it yourself to do exactly what you want.</div> <div><br clear="all"> Thanks,
Brian Desmond
<a moz-do-not-send="true" href="javascript:window.location.replace('ma'+'ilto:'+'brian'+'@'+'briandesmond'+'.com')" target="_blank">brian@briandesmond.com</a>
c - 312.731.3132
</div> <div class="gmail_quote">On Mon, Jul 28, 2008 at 4:01 PM, Ramon Linan <<a moz-do-not-send="true" href="javascript:window.location.replace('ma'+'ilto:'+'Ramon.Linan'+'@'+'gst'+'.com')" target="_blank">Ramon.Linan@gst.com</a>> wrote:
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0px 0px 0px 0.8ex; padding-left: 1ex;"> <div vlink="purple" link="blue" lang="EN-US"> <div> <div> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);">Hi,</span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);"> </span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);">I need to implement a website containing a password reset "tool" for AD users that work outside our network.</span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);"> </span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);">Does anyone know of a web based tool-script or whatever that do this?</span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);"> </span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);"> </span></p> <p><span style="font-size: 11pt; color: rgb(31, 73, 125);">Rezuma</span></p> </div> </div> </div> </blockquote> </div>
</div> </blockquote> </div> </div> </div> List info : <a moz-do-not-send="true" href="http://www.activedir.org/List.aspx" target="_blank">http://www.activedir.org/List.aspx</a> List FAQ : <a moz-do-not-send="true" href="http://www.activedir.org/ListFAQ.aspx" target="_blank">http://www.activedir.org/ListFAQ.aspx</a> List archive: <a moz-do-not-send="true" href="http://www.activedir.org/ma/default.aspx" target="_blank">http://www.activedir.org/ma/default.aspx</a> </blockquote> </div>
</div> </blockquote> </body> </html> List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
| | | |
| bdesmond
Posts:347
 | | 07/28/2008 9:48 PM |
| And they'll tell you they purchased 17 stars from JD Powers and got the fourth quadrant of the Gartner Triangle and some other BS that you would have found squeezed on the bottom of the back of the one-pager.
Thanks, Brian Desmond brian@briandesmond.com
c - 312.731.3132
On Mon, Jul 28, 2008 at 8:37 PM, Susan Bradley, CPA <sbradcpa@pacbell.net> wrote:
> Agreed. But I can at least go to the vendor and ask "So, hired any > security firms to do a review?" :-) > > > Brian Desmond wrote: > > Fair enough. My experience as a consultant is that almost all of these > self service password reset systems I see are homegrown. It's usually easier > and cheaper to make it do exactly what you want (and that can be quite a > workflow in complex enteprises) than to try and customize a third party > tool. Whether or not the third party tool is built any better than something > someone inhouse built is entirely debateable too. > > OWA has had this functionality since 5.5 at least. > > Thanks, > Brian Desmond > brian@briandesmond.com > > c - 312.731.3132 > > On Mon, Jul 28, 2008 at 8:07 PM, Susan Bradley, CPA <sbradcpa@pacbell.net> > wrote: > >> With deepest humility and deep respect, (and no disrespect for Ramon >> either, he may be the greatest, most secure .net developer known to >> mankind), but is it always the right thing to build ones own app if one does >> not have the necessary security expertise/third party review to ensure that >> .net app is securely built? >> >> On the pen test listserves, they basically haven't met a internally built >> web portal yet (and some third party vendor ones as well) that they can't >> use as a means to gain entrance to that network. >> >> That will be an externally facing web app with a hook into some pretty >> important information, yes? >> >> I would want that to be "a couple of afternoons and a review from a >> security team" if I were management in his firm. >> >> Brian Desmond wrote: >> >> Given a couple afternoons, Joe Kaplan/Ryan Dunn's .net book, and a >> suitable ASP.Net book, you could build it yourself to do exactly what you >> want. >> >> Thanks, >> Brian Desmond >> brian@briandesmond.com >> >> c - 312.731.3132 >> >> On Mon, Jul 28, 2008 at 4:01 PM, Ramon Linan <Ramon.Linan@gst.com> wrote: >> >>> Hi, >>> >>> >>> >>> I need to implement a website containing a password reset "tool" for AD >>> users that work outside our network. >>> >>> >>> >>> Does anyone know of a web based tool-script or whatever that do this? >>> >>> >>> >>> >>> >>> Rezuma >>> >> >> List info : http://www.activedir.org/List.aspx List FAQ : >> http://www.activedir.org/ListFAQ.aspx List archive: >> http://www.activedir.org/ma/default.aspx > > > List info : http://www.activedir.org/List.aspx List FAQ : > http://www.activedir.org/ListFAQ.aspx List archive: > http://www.activedir.org/ma/default.aspx >
| | | |
| bsonposh
Posts:168
 | | 07/28/2008 9:54 PM |
| I am curious about this. Can you provide some examples? I have heard of some companies that do this, but generally because they want to take the easy way out.
I dont want to highjack the OP thread so we can OT this.
On Mon, Jul 28, 2008 at 9:31 PM, Brian Desmond <brian@briandesmond.com>wrote:
> It's a valid request in a lot of customer environments. Every customer > makes that decision, but, if you hve a large remote workforce, your choices > are somewhat limited. > > Thanks, > Brian Desmond > brian@briandesmond.com > > c - 312.731.3132 > > On Mon, Jul 28, 2008 at 8:13 PM, Brandon Shell <tshell@gmail.com> wrote: > >> I would also question the need to allow password resets outside of the >> domain. It may be a valid request, but I would fight it tooth and nail. >> >> >> On Mon, Jul 28, 2008 at 9:07 PM, Susan Bradley, CPA <sbradcpa@pacbell.net >> > wrote: >> >>> With deepest humility and deep respect, (and no disrespect for Ramon >>> either, he may be the greatest, most secure .net developer known to >>> mankind), but is it always the right thing to build ones own app if one does >>> not have the necessary security expertise/third party review to ensure that >>> .net app is securely built? >>> >>> On the pen test listserves, they basically haven't met a internally built >>> web portal yet (and some third party vendor ones as well) that they can't >>> use as a means to gain entrance to that network. >>> >>> That will be an externally facing web app with a hook into some pretty >>> important information, yes? >>> >>> I would want that to be "a couple of afternoons and a review from a >>> security team" if I were management in his firm. >>> >>> >>> Brian Desmond wrote: >>> >>> Given a couple afternoons, Joe Kaplan/Ryan Dunn's .net book, and a >>> suitable ASP.Net book, you could build it yourself to do exactly what you >>> want. >>> >>> Thanks, >>> Brian Desmond >>> brian@briandesmond.com >>> >>> c - 312.731.3132 >>> >>> On Mon, Jul 28, 2008 at 4:01 PM, Ramon Linan <Ramon.Linan@gst.com> >>> wrote: >>> >>>> Hi, >>>> >>>> >>>> >>>> I need to implement a website containing a password reset "tool" for AD >>>> users that work outside our network. >>>> >>>> >>>> >>>> Does anyone know of a web based tool-script or whatever that do this? >>>> >>>> >>>> >>>> >>>> >>>> Rezuma >>>> >>> >>> List info : http://www.activedir.org/List.aspx List FAQ : >>> http://www.activedir.org/ListFAQ.aspx List archive: >>> http://www.activedir.org/ma/default.aspx >> >> >> >
| | | |
| sbradcpa
Posts:299
 | | 07/28/2008 10:00 PM |
| All I'm saying is that these days, depending on the intellectual assets behind that web site, I'd be asking management to get another set of eyes to look at my work is all.
If they value what's behind that door, it needs to be more than just a couple of afternoons is all I'm saying :-)
Brian Desmond wrote: > And they'll tell you they purchased 17 stars from JD Powers and got > the fourth quadrant of the Gartner Triangle and some other BS that you > would have found squeezed on the bottom of the back of the one-pager. > > Thanks, > Brian Desmond > brian@briandesmond.com <mailto:brian@briandesmond.com> > > c - 312.731.3132 > > On Mon, Jul 28, 2008 at 8:37 PM, Susan Bradley, CPA > <sbradcpa@pacbell.net <mailto:sbradcpa@pacbell.net>> wrote: > > Agreed. But I can at least go to the vendor and ask "So, hired > any security firms to do a review?" :-) > > > Brian Desmond wrote: >> Fair enough. My experience as a consultant is that almost all of >> these self service password reset systems I see are homegrown. >> It's usually easier and cheaper to make it do exactly what you >> want (and that can be quite a workflow in complex enteprises) >> than to try and customize a third party tool. Whether or not the >> third party tool is built any better than something someone >> inhouse built is entirely debateable too. >> >> OWA has had this functionality since 5.5 at least. >> >> Thanks, >> Brian Desmond >> brian@briandesmond.com <mailto:brian@briandesmond.com> >> >> c - 312.731.3132 >> >> On Mon, Jul 28, 2008 at 8:07 PM, Susan Bradley, CPA >> <sbradcpa@pacbell.net <mailto:sbradcpa@pacbell.net>> wrote: >> >> With deepest humility and deep respect, (and no disrespect >> for Ramon either, he may be the greatest, most secure .net >> developer known to mankind), but is it always the right thing >> to build ones own app if one does not have the necessary >> security expertise/third party review to ensure that .net app >> is securely built? >> >> On the pen test listserves, they basically haven't met a >> internally built web portal yet (and some third party vendor >> ones as well) that they can't use as a means to gain entrance >> to that network. >> >> That will be an externally facing web app with a hook into >> some pretty important information, yes? >> >> I would want that to be "a couple of afternoons and a review >> from a security team" if I were management in his firm. >> >> >> Brian Desmond wrote: >>> Given a couple afternoons, Joe Kaplan/Ryan Dunn's .net book, >>> and a suitable ASP.Net book, you could build it yourself to >>> do exactly what you want. >>> >>> Thanks, >>> Brian Desmond >>> brian@briandesmond.com <mailto:brian@briandesmond.com> >>> >>> c - 312.731.3132 >>> >>> On Mon, Jul 28, 2008 at 4:01 PM, Ramon Linan >>> <Ramon.Linan@gst.com <mailto:Ramon.Linan@gst.com>> wrote: >>> >>> Hi, >>> >>> >>> >>> I need to implement a website containing a password >>> reset "tool" for AD users that work outside our network. >>> >>> >>> >>> Does anyone know of a web based tool-script or whatever >>> that do this? >>> >>> >>> >>> >>> >>> Rezuma >>> >>> >> List info : http://www.activedir.org/List.aspx List FAQ : >> http://www.activedir.org/ListFAQ.aspx List archive: >> http://www.activedir.org/ma/default.aspx >> >> > List info : http://www.activedir.org/List.aspx List FAQ : > http://www.activedir.org/ListFAQ.aspx List archive: > http://www.activedir.org/ma/default.aspx > > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
| | | |
| bdesmond
Posts:347
 | | 07/28/2008 10:08 PM |
| Honestly I don't think this would really be an appropriate forum for that discussion.
Thanks, Brian Desmond brian@briandesmond.com
c - 312.731.3132
On Mon, Jul 28, 2008 at 8:46 PM, Brandon Shell <tshell@gmail.com> wrote:
> I am curious about this. Can you provide some examples? I have heard of > some companies that do this, but generally because they want to take the > easy way out. > > I dont want to highjack the OP thread so we can OT this. > > On Mon, Jul 28, 2008 at 9:31 PM, Brian Desmond <brian@briandesmond.com>wrote: > >> It's a valid request in a lot of customer environments. Every customer >> makes that decision, but, if you hve a large remote workforce, your choices >> are somewhat limited. >> >> Thanks, >> Brian Desmond >> brian@briandesmond.com >> >> c - 312.731.3132 >> >> On Mon, Jul 28, 2008 at 8:13 PM, Brandon Shell <tshell@gmail.com> >> wrote: >> >>> I would also question the need to allow password resets outside of the >>> domain. It may be a valid request, but I would fight it tooth and nail. >>> >>> >>> On Mon, Jul 28, 2008 at 9:07 PM, Susan Bradley, CPA < >>> sbradcpa@pacbell.net> wrote: >>> >>>> With deepest humility and deep respect, (and no disrespect for Ramon >>>> either, he may be the greatest, most secure .net developer known to >>>> mankind), but is it always the right thing to build ones own app if one does >>>> not have the necessary security expertise/third party review to ensure that >>>> .net app is securely built? >>>> >>>> On the pen test listserves, they basically haven't met a internally >>>> built web portal yet (and some third party vendor ones as well) that they >>>> can't use as a means to gain entrance to that network. >>>> >>>> That will be an externally facing web app with a hook into some pretty >>>> important information, yes? >>>> >>>> I would want that to be "a couple of afternoons and a review from a >>>> security team" if I were management in his firm. >>>> >>>> >>>> Brian Desmond wrote: >>>> >>>> Given a couple afternoons, Joe Kaplan/Ryan Dunn's .net book, and a >>>> suitable ASP.Net book, you could build it yourself to do exactly what you >>>> want. >>>> >>>> Thanks, >>>> Brian Desmond >>>> brian@briandesmond.com >>>> >>>> c - 312.731.3132 >>>> >>>> On Mon, Jul 28, 2008 at 4:01 PM, Ramon Linan <Ramon.Linan@gst.com> >>>> wrote: >>>> >>>>> Hi, >>>>> >>>>> >>>>> >>>>> I need to implement a website containing a password reset "tool" for AD >>>>> users that work outside our network. >>>>> >>>>> >>>>> >>>>> Does anyone know of a web based tool-script or whatever that do this? >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> Rezuma >>>>> >>>> >>>> List info : http://www.activedir.org/List.aspx List FAQ : >>>> http://www.activedir.org/ListFAQ.aspx List archive: >>>> http://www.activedir.org/ma/default.aspx >>> >>> >>> >> >
| | | |
|
|