Need help with IIS 5.0 (IISADMPWD question)

[vetteguy]

I have a server which is running Exchange 2000. I need to be able to enable users to change their passwords via the web. This behavior is disabled in IIS 5.0 by default, but there are several Microsoft KB articles which tell you how to enable it. For instance, this one tells you how to create a virtual directory under IIS called "IISADMPWD", and configure it to enable password changes over the web. The same basic procedure is in this one. For those who don't want to read, here is the gist:

Create a virtual directory under IIS, and call it IISADMPWD
Point it to the directory C:\winnt\system32\inetsrv\iisadmpwd
Grant anonymous access, and grant Read, Run Script, and Execute permission to the virtual directory.
Enable SSL on the server, and enable it for this directory.

According to the KB articles, at this point, you "are able to change passwords via the web". Well, not exactly. It will prompt me for all the info, but it doesn't do anything when I attempt to change it. Now, if I access one of the files in \iisadmpwd directly, it gives me the same login page, and it WILL allow me to change.

Is there anyone who is knowledgeable about IIS who could help me out here? I'm really up a creek, and I've googled the topic to death and there doesn't seem to be much information. Any help is GREATLY appreciated.

 

[mikecel79]

I've never tried this myself but there is one other thing you may need to check. What about NTFS permissions on the C:\winnt\system32\inetsrv\iisadmpwd folder? Wouldn't you need to grant Anonymous read access to that folder also? If not the NTFS permissions will block it.

 

[vetteguy]

I haven't tried what you suggested, but here's an oddity.

Up until last night, I had been testing this on a Windows 98 machine. Just for fun, last night I tried it on both a Windows 2000 and XP machine, and guess what...it worked! So I plugged in a second 98 machine and it displayed the same behavior as the first. No matter what you enter in the change password box, it just dumps you to the second screen which is blank, instead of the "password successfully changed" message. I have scoured Microsoft's KB and found nothing that says there is a problem with 98 clients being able to change their passwords via the web. There was one that mentioned a problem with IE versions 5.0 and lower, but both of these are on version 6.

So, anyone else have any ideas for me? If I called Microsoft would they even help me with a 98 issue anymore? (I don't care if they charge me at this point).

 

[mikecel79]

Microsoft still offers support for Win98 machines.

The Win2k/XP machines you tried were they part of the same domain as the Exchange server? Now that I think about it a Win9x machine can't change a user's password because it can't have a computer account in the domain.

 

[vetteguy]

Originally posted by: mikecel79
Microsoft still offers support for Win98 machines.

The Win2k/XP machines you tried were they part of the same domain as the Exchange server? Now that I think about it a Win9x machine can't change a user's password because it can't have a computer account in the domain.

Except I'm trying to change the password via the web, not through local security. And I know that they couldn't have required you to have a computer account in the domain because this is for Outlook Web Access, and the whole point of that was to be able to access your Exchange data when you're NOT on a machine in the network. I think I might have to contact Microsoft on this one, but do I ask for Windows 98 support or server support? I love how there are always multiple things involved when you call them, that way they can charge you twice.

 

[mikecel79]

When you call them open up a trouble ticket for Exchange Server. Since this is a feature of Exchange Server it should apply to that. They will give you support for the server and any clients connecting to it.

I still don't think it's possible to do this with Win9x cause of the same reason that you can't do it when your logged into the domain from a Win9x machine. If you want some serious Exchange help then check the Microsoft NewsGroups. There are LOTS of more knowledgeable people about Exchange than I am there.

 

[vetteguy]

Originally posted by: mikecel79
When you call them open up a trouble ticket for Exchange Server. Since this is a feature of Exchange Server it should apply to that. They will give you support for the server and any clients connecting to it.

I still don't think it's possible to do this with Win9x cause of the same reason that you can't do it when your logged into the domain from a Win9x machine. If you want some serious Exchange help then check the Microsoft NewsGroups. There are LOTS of more knowledgeable people about Exchange than I am there.

Another update:

On my 98 machine, I can go to https://testserver.test.com/iisadmpwd/aexp.htr and I get the change password screen. I CAN change my password via that interface, so it must be something to do with the way the Exchange interface works with 98.

Here's the problem with opening a trouble ticket for Exchange (and believe me I have experience with this): I call and pay $195 for the Exchange ticket. I tell them my problem, they spend 5 minutes typing, and tell me it's an IIS related problem, so it will be another $195. THey charge me for that, and the IIS people spend 5 minutes and say it has to do with 2000 Server security, so that'll be another $195. The 2000 people will say it;s a 98 issue, who will in turn say it's an Internet Explorer issue. So I've now spent $1200 on this one tiny problem. And yes, this type of thing does happen there everyday.

Thanks for the link for the newsgroups, I will definitely be checking them out. Here's hoping someone there has been down this path before. Thanks for your help, it is greatly appreciated! Anyone else have any ideas for me?