Creating password reset for helpdesk in FIM 2010 R2

Question

I want my helpdesk to use FIM portal for resetting password.
Helpdesk logs on to FIM portal.
click custom page called password management
Types the account name and get an option to 1- reset the password  2- Reset and send password to manager.
can this be achieved ?
Can some one guide me how to do this
Creating custom page "password management" and other controls like user account name , reset password and reset and send password to manager .
When helpdesk click on reset password , can a WF be called to reset the password in AD ?
Any guidance will be helpful.
AdiKumar

Answer 1

Just this week i implemented such a feature at one of our customers. their helpdesk wants to be able to change all the password reset features which you can do in AD by their own.
I've used Craigs fantastic Powershell Activity to archive this goal, Thanx Craig for sharing this piece of work to us all.
So this solution goes like this:
Create an additional tab with rcdc's on the users UI.
Create a NewPW, doPWReset, ChangePWNextLogon and UnlockAccount Attribute and Binding for Users.
NewPW always holds an default reset PW, but can be changed by helpdesk.
MPR/Worksflow sets default values to any current and new user object for this attribute.
Powershell workflow is triggert on changing any of this attributes.
This Powershell reads the request and target object, determine the current state of the PWReset attributes and do all the appropriate actions with the Powershell AD command.
After this i used the OOB Function Evaluator to reset all PWReset attributes to their default values.
One thing as a little warning, be sure the workflow is not triggert if the FIMService account changed the PW attributes otherwise you get an endless loop, like me in my first tests ;-)
Hope this helps
Peter