Groups > IBM > IBM Tivoli Directory Integrator > Re: Bulk Password Resets using TDI




Bulk Password Resets using TDI

Bulk Password Resets using TDI
Thu, 10 Jan 2008 15:00:39 -050
Hi,
We have an issue where we have set incorrect "default" passwords to
some 
10000 user AD,TAM,LDAP accounts in ITIM as per the Provisioning Policy. Now 
we want to correct the passwords for all the accounts. We have password sync 
enabled. So I believe changing password of only one of the person accounts 
will take of changing the others.

Is there a way in TDI to help in this correction?

Thanks & Regards,
N 

Post Reply
Re: Bulk Password Resets using TDI
Tue, 15 Jan 2008 08:32:45 +010
Hi Nishant,

You could use TDI to set the userAccountControl flags in
the AD accounts to force users (possibly only those with
invalid passwords, if you can determine this) to reset
their passwords at next Windows login:

http://support.microsoft.com/kb/305144

If your password-sync solution takes AD as a source for
changes then this should help start the correction process.

-Eddie


Nishant Aggarwal wrote:
> Hi,
> We have an issue where we have set incorrect "default" passwords
to some 
> 10000 user AD,TAM,LDAP accounts in ITIM as per the Provisioning Policy. Now

> we want to correct the passwords for all the accounts. We have password
sync 
> enabled. So I believe changing password of only one of the person accounts

> will take of changing the others.
> 
> Is there a way in TDI to help in this correction?
> 
> Thanks & Regards,
> N 
> 
Post Reply
about | contact