IISADMPWD Replacement Tool

IISADMPWD Replacement Tool will protect websites and web applications allowing Active Directory password changes when local or active directory account passwords are invalid. It uses IIS Anonymous authentication to allow users to access the web applications in IIS 7 regardless of their active directory or local password status. Web Active Directory engineered a replacement solution for the Microsoft® IISADMPWD utility because the legacy Microsoft release of IISADMPWD does not support IIS 7 and later. Many organizations employed the IISADMPWD tool with IIS 5 and IIS 6 to allow password changes in Active Directory from web applications. With the release of IIS 7 and its architectural and security changes from previous versions of IIS, the old IISADMPWD tool no longer works. In fact, Microsoft doesn’t even support IISADMPWD on IIS 7 and later. Our solution allows users to change their active directory password from a web page without requiring changes to your IIS 7 web application.

schedule demo free trial buy now

IISADMPWD Replacement Tool Features & Benefits

Allows Active Directory password changes when the “User must change password at next login” flag is set
Uses IIS Anonymous authentication to allow users to access web applications in
IIS 7 regardless of their active directory or local password status
Easily integrates with your web application
Includes two web applications: Check Password Status: Acts as the first page of the authentication process and checks the Active Directory password status for a user to determine if the password must be changed. This is optional.
Change Password: Allows users to change their Active Directory password: this can either be redirected to from your website and/or web application (without any changes on your end) or from the IISADMPWD Check
Password Status application
Redirects the user to your web application after the password status check completes and no password change is needed
Allows your web application to authenticate the user with your normal scheme
Can use an HTML redirector file to redirect clients with HTTP 401.1 errors (Access is denied due to invalid credentials)
Requires no changes to your web application configuration and checks the AD password status before the user tries to authenticate against your application
Works against your Active Directory account store and/or local SAM Account database

Web Active Directory IISADMPWD Replacement Tool Application Architecture

Web Active Directory IISADMPWD Replacement Tool Alternative Architecture

FAQ

What is IISADMPWD Replacement Tool?

IISADMPWD Replacement Tool provides a web interface to check your Active Directory password before going to a web application that uses Windows Active Directory security.

What happens if a user password is about to expire?

The user will be forwarded to a page to reset their password and continue on.

Can I change the look and feel of the application?

Yes, you can modify the html and style sheets to give the look and feel you desire.

How secure is it?

It is very secure, it doesn’t need any additional security privileges since users have rights to change their own passwords.

How is IISADMPWD licensed?

IISADMPWD Replacement Tool is a perpetual license and licensed by server.

Do you offer an evaluation?

Yes, there is a free 14 day evaluation is available here.

I need help setting it up, do you offer assistance?

Yes, we stand behind our products and offer full support during your evaluation. All help resources can be found under here.

IISADMPWD Replacement Tool System Requirements

Web Active Directory’s IISADMPWD Replacement Tool replaces the original Microsoft® IISADMPWD tool for IIS 7 and later versions. The IISADMPWD Replacement Tool includes the following detailed system requirements:

Requirement	Description
Windows Server 2019, 2016, 2012 R2, 2012, 2008 R2 and 2008,	Hosts PeopleSearch web application. The server must have the Web Server role installed with ASP.NET and IIS Windows Authentication turned on.
IIS 7 or later	Hosts ASP.NET processes and web applications.
Microsoft .NET Framework version 4.5.1 or later	Runs ASP.NET web applications.
Windows service account with permissions to execute searches and change passwords in Active Directory (Optional)	Used to check password status in Active Directory and to change passwords for users

schedule demo free trial buy now