The password reset function in the user card is available when the User's password reset in Active Directory option is enabled in the Common features section of the Indeed CM Setup Wizard.
The Indeed Certificate Manager allows for resetting of user domain password by administrator or operator. This might be necessary in case the user has to login to operating system with domain password for some reason.
Example:
If a user left his or her smart card with certificate for authentication behind and doesn’t know the domain password.
To reset the password, click Reset user password, set the new value, option of mandatory change upon the first login (if required) and confirm password:
Service account should have the privileges to Reset password and Write pwdLastSet in Active Directory (see Configuring the user catalog in Active Directory).
Expiration date is the value, that triggers the Card Monitor application to reset the password to a random value when reached. The password will consist of the following:
- Latin capital and lowercase letters
- Digits
- Up to 10 characters
The set password is not written to the Indeed CM storage.