Author: Zahir Hussain Shah
Password Policies V/S Exchange 2010 Outlook Web Application (OWA)
Tags: Allow users to change their passwords from Exchange 2010 OWA | Exchange 2010 OWA Password change issues
Problem:
If you reset an Exchange Mailbox User to change his password at next login, where user is a remote users, and sitting in a remote internet PC, and trying to open his mailbox over OWA, so he will not be able to open it, because in AD, his user is set to change password at next login, and where OWA does not provide welcome him to change password, while logging in the OWA.
So how to fix this problem? L
Well, with the great addition to Exchange family, Exchange 2010 SP1 introduced a new feature “Users to Change Expired Passwords” to reset their passwords on the OWA website, which is very nifty feature for users to change their password, on the OWA site.
Now let me tell you how you enable this.
Note:
If you don’t have Form based Authentication enabled on your Exchange 2010 OWA, this solution will not work for you, because if you are using Integrated Windows Authentication, which straights away take you to the OWA, and where you will not be able to authenticate yourself, and it also dose not provide any kind of area, where you can change your password, so you need to use Form based authentication to use this solution.
Solution:
You have to add a registry entry on your Exchange 2010 CAS Servers to enable this feature.
Note:
Please take backup of your registry before modifying or adding any new entry, Microsoft or myself will not be responsible for any problem cause of wrong modifying registry.
Enable Users to Change Expired Passwords
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the “Outlook Web App Registry Editor” entry in the Client Access Permissions topic.
1. Log on to the Client Access server.
2. Start Registry Editor (regedit).
3. Locate the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchange OWA.
4. Create the following DWORD value if it doesn’t already exist: ChangeExpiredPasswordEnabled. The value type will be REG_DWORD.
5. Set the value of ChangeExpiredPasswordEnabled to 1.
6. Exit Registry Editor.
For more information, you can see the below TechNet KB:
http://technet.microsoft.com/en-us/library/bb684904.aspx
Cheers!
Zahir Hussain Shah
Infrastructure Practice Consultant – Messaging Solutions
MCSE, MCTS, MCTIP Enterprise Administrator, ITIL
Blog: http://zahirshahblog.com | LinkedIn | Twitter
Leave a comment