Disable user password reset

I am building a lab image and I am trying to find a way to disable is user's ability to change the password. I have looked all over google and searched this forum. Please help!

Dave Sawyer wrote:
kkeo211 wrote:
I am building a lab image and I am trying to find a way to disable is user's ability to change the password. I have looked all over google and searched this forum.
Just don't give the lab user account administrator privileges. Without admin privileges (unless my memory is completely faulty; I'm not at my Mac to confirm right now) the user shouldn't be able to change the account password.
that's not correct. a standard user can change their account password. An admin user can lock this ability down using Workgroup manager as I said. i still see absolutely nothing wrong with having standard users able to change their password. and of course no sane lab administrator will let regular lab users have admin accounts.

Similar Messages

Automation of user password reset

Hi, Does anyone know if there is a way to automate user password resets in Essbase? Does application manager do have this capability? If not is there another 3rd party vendor tool that will interface w/ App Man to do this?We are using Essbase 6.1 on an NT server.Thanks!

I don't really understand what you mean by "automated password resets" - you can use MaxL or ESSCMD to reset a user's password (alter user command in MaxL or the SETPASSWORD command in ESSCMD).Either of those tools can be used to automate a password reset - but it depends on when and how you want it run. Normally passwords are reset when the user forgets it - and your security would be wide open if a password coule be automatically reset on demand.Perhaps you could detail the problem you are trying to solve.Regards,Jade--------------------------------Jade ColeSenior Business Intelligence ConsultantClarity [email protected]

Disabled User Password should not be changed

Hi,
We have a requirement that only if the user's status is active, then only administartor must be able to change the user password. Admin should not be able to change the password if the user is in disabled state/locked state.How can we achieve this?please sugest...
Regards
Vinoth

Hi,
We have made an entity adapter which is taking usr login value from User[in Data object manager] and calling our java method which is making connection to OIM database and getting us the status of user.
Now if the status of user is disabled method is returning true and on true we have associated our error code to it.
We are executing our entity adapter in pre-update execution.
Now when we are changing password of any disabled user we are able to see our error code. But what ever update [either first name update, enable] we are running on that user same error code is appearing.
Plesae suggest/reply.
thanks

Disable Initial Password Reset.

Hello;
Is it possible to set that the user do not change the initial password
when created or even if the SAP Administrator reset it, the first time
the user log on the system.
Thanks;
Ali Gumusoglu

Hi Ali,
Yes, it is possible; for that follow below steps:
1.Start the Config Tool C:\usr\sap\<SID>\<engine-instance>\j2ee\configtool\configtool.bat
Ex: D:\usr\sap\F02\JC00\j2ee\configtool --> configtool.bat
2.Goto cluster-data --> Global server configuration --> services --> com.sap.security.core.ume.service
3.Click on below property and set value is FALSE and click and "SET" button.
"ume.logon.security_policy.password_change_required = FALSE"
4.Save.
5. Restart the engine.
Now
1. Login with an "Administrator"
2. Create a user and define a password like "init123"
3. logoff from "administrator"
4. login with new user; password is "init123"
now system will not ask to change password.
Reward Points; if it is usefull.
Thanks,
Nagaraju Parlapalli

Portal user password reset!

I for some reason I reset the Portal (DB Schema) user password and i'm not able to get into the portal page!
please help..
here is the err i get ---
http://<host>:7778/pls/portal/
Forbidden
You don't have permission to access /pls/portal/portal.home on this server.
Oracle HTTP Server/1.3.22 Server at <host name> Port 7778

Ankur,
Its very much possible to have an automatted job which will read a text file from a portal content path and reset the user password. You can implement KM Scheduler task using NWDS.
Let your KM Scheduler task have the logic to read a file. Use UME API to reset the password for the given user.
Deploy this KM Scheduler task into portal from NWDS using portal admin user name and password.
Navigate to portal and schedule the deployed task under System admin -> System config -> Knowledge management -> content Management -> Global services -> Scheduler tasks -> Schedulers -> You should be able to see your deployed scheduler here -> just select the link and set the time period -> by this way you can run a job at any time like everyday at 11A.M , every one hour, ever 10 minutes etc.
I remember thr is blog on SDN reg the scheduler. Please search in SDN.
Ram

User password reset

I need to reset user's password using API. What would be the package/api name to update user password? Can I use fnd_user_pkg.setreencryptedpassword?
Thanks
Edited by: user10445786 on Nov 3, 2008 5:30 PM

Please refer to Note: 364898.1 - How To Update User Data Using a Supported API
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=364898.1

Disable user password security:

I wonder to disable some pdf files user password, may i know is it possible?
Thanks your concern.
Regards,
Tham

By "user password" you mean the password that prompts when the file is opened (which is defined in the PDF Reference as a "user password"), or are you trying to remove an "owner password", which will allow you to open the document without a password but requires a password in order to make any changes.
If you mean a true "user password", then no. It is not possible. When a "user password" is set, the entire contents of the file is encrypted using that password as a salt, and it can be encrypted with a variety of different algorithms (from 40-bit RC4 to 256-bit AES).

Mass users password reset

Hi, can I know how to reset mass users password at once. etc reset 10 users password at a one time. thx

Hi Juan,
now, why would that be? whether you reset a single password using SU01 or batch-input record the same thing, you can always (system settings allowing) set a predefined passwort ... for an alredy existing user (and not necessarily a new one)!
Cheers,
fish

AD User Password Reset Using Orchestrator?

Hello Everyone,
Please suggest me, how to make password reset orchestrator run book.
Regards
Sheetla Maurya

Hi Anders
Thanks for response
I already flow this process, but password reset automation not work.
If you have other link or export run book, so please share with me.
Regards
Sheetla Maurya

Partially disabled on password reset

version: IDM 7.1, DSEE 6.3
I have user account in IDM with a resource account on LDAP.
The account looks fine.
But when i change the password via a custom anonymous task the password gets reset on IDM, but the account is tagged as partially disabled. Also when you check the user xml it shows the ldap account as disabled=true.
We use the nsaccountlock feature actually to disable / enable .
Also have the com.waveset.adapter.util.ActivationByAttributeEnableFalse set for activation method in the resource configuration.
the custom password task has a action like the following to include the changes to the resources.
<Activity id='2' name='Reset Password'>
        <Action id='0' application='com.waveset.session.WorkflowServices'>
          <Argument name='op' value='checkoutView'/>
          <Argument name='type' value='Password'/>
          <Argument name='authorized' value='true'/>
          <Argument name='subject' value='$(accountId)'/>
          <Argument name='id'>
            <ref>accountId</ref>
          </Argument>
          <Return from='view' to='user'/>
          <Return from='WF_ACTION_ERROR' to='error'/>
        </Action>
        <Action id='1'>
          <expression>
            <block trace='true'>
              <set name='user.resourceAccounts.password'>
                <ref>userPassword</ref>
              </set>
              <set name='user.resourceAccounts.confirmPassword'>
                <ref>userPassword</ref>
              </set>
              <set name='user.resourceAccounts.selectAll'>
                <s>true</s>
              </set>
            </block>
          </expression>
        </Action>
        <Action id='2' application='com.waveset.session.WorkflowServices'>
          <Argument name='op' value='checkinView'/>
          <Argument name='accountId' value='$(accountId)'/>
          <Argument name='view' value='$(user)'/>
          <Argument name='authorized' value='true'/>
          <Argument name='subject' value='$(accountId)'/>
          <Return from='WF_ACTION_ERROR' to='error'/>
        </Action>
        <Transition to='Update Other Attributes'/>
      </Activity>Any help / input is appreciated.

In your existing code, change the subject to 'configurator' or any admin that you have .. i can see you are using accountId as a subject .. also try
using target resources concept of IDM.
Still i have a sample code for changing the resource password directly by giving the resource name .. I hope you get an answer soon for this problem
Instead of using checkout and checkin of the view you can directly call the workflow services to change the password. All pass the name of the resource for which the password change is required.
<Activity id='7' name='Change Resource Account Passwords'>
<Variable name='WF_ACTION_ERROR'/>
<Action id='0' application='com.waveset.provision.WorkflowServices'>
<Argument name='op' value='changeResourceAccountPassword'/>
<Argument name='resources'>
<!----- List the name of the resources here ---- !>
</Argument>
</Action>
<Action id='1'>
<expression>
<set name='ERROR_STATUS'>
<cond>
<eq>
<ref>WF_ACTION_ERROR</ref>
<s>true</s>
</eq>
<s>failure</s>
<s>success</s>
</cond>
</set>
</expression>
</Action>
<Transition to='ERROR'/>
</Activity>
Thanks,
Stallion

Doamin user password reset procedure failed on Weblogic 11g

Hi,
I have lost my admin console password for weblogic11g server. I have followed the below steps to reset the password.
1). Created an initialization file using command java weblogic.security.utils.AdminAccount weblogic welcome1 .
2). Moved the file DefaultAuthenticatormyrealmInit.ldift from $DOMAIN_HOME/security/ and replaced it by DefaultAuthenticatorInit.ldift which is created in the previous step.
3). Renamed the date folder as data_bak under the Admin server as well Managed server.
4). Changed the boot.properties value to a new password.
5). Restarted the admin server.
But i am not able to start the admin server, It is throwing the below error.
Error:
<Jun 4, 2012 8:59:58 PM IST> <Critical> <WebLogicServer> <cscpocappche001> <AdminServer> <main> <<WLS Kernel>> <> <> <1338823798826> <BEA-000386> <Server subsystem failed. Reason: weblogic.security.SecurityInitializationException: Server installed as Windows NT service with incorrect password for user 12345678; The password may have been changed since the server was installed as a Windows NT Service. Contact the Windows NT system administrator.
weblogic.security.SecurityInitializationException: Server installed as Windows NT service with incorrect password for user 12345678; The password may have been changed since the server was installed as a Windows NT Service. Contact the Windows NT system administrator.
     at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:944)
     at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1050)
     at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:873)
     at weblogic.security.SecurityService.start(SecurityService.java:141)
     at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
Caused By: weblogic.security.providers.authentication.LoginServerUnavailableException: Connection refused: connect
     at weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.handleLDAPAtnDelegateException(LDAPAtnLoginModuleImpl.java:625)
     at weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.login(LDAPAtnLoginModuleImpl.java:250)
     at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
     at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
     at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
     at java.security.AccessController.doPrivileged(Native Method)
     at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
     at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
     at com.bea.common.security.internal.service.JAASLoginServiceImpl.login(JAASLoginServiceImpl.java:113)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
     at $Proxy16.login(Unknown Source)
     at weblogic.security.service.internal.WLSJAASLoginServiceImpl$ServiceImpl.login(WLSJAASLoginServiceImpl.java:89)
     at com.bea.common.security.internal.service.JAASAuthenticationServiceImpl.authenticate(JAASAuthenticationServiceImpl.java:82)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
     at $Proxy34.authenticate(Unknown Source)
     at weblogic.security.service.WLSJAASAuthenticationServiceWrapper.authenticate(WLSJAASAuthenticationServiceWrapper.java:40)
     at weblogic.security.service.PrincipalAuthenticator.authenticate(PrincipalAuthenticator.java:348)
     at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:929)
     at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1050)
     at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:873)
     at weblogic.security.SecurityService.start(SecurityService.java:141)
     at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
>
####<Jun 4, 2012 8:59:58 PM IST> <Notice> <WebLogicServer> <cscpocappche001> <AdminServer> <main> <<WLS Kernel>> <> <> <1338823798857> <BEA-000365> <Server state changed to FAILED>
####<Jun 4, 2012 8:59:58 PM IST> <Error> <WebLogicServer> <cscpocappche001> <AdminServer> <main> <<WLS Kernel>> <> <> <1338823798857> <BEA-000383> <A critical service failed. The server will shut itself down>
####<Jun 4, 2012 8:59:58 PM IST> <Notice> <WebLogicServer> <cscpocappche001> <AdminServer> <main> <<WLS Kernel>> <> <> <1338823798857> <BEA-000365> <Server state changed to FORCE_SHUTTING_DOWN>
####<Jun 4, 2012 8:59:58 PM IST> <Info> <WebLogicServer> <cscpocappche001> <AdminServer> <main> <<WLS Kernel>> <> <> <1338823798873> <BEA-000236> <Stopping execute threads.>
Please advise me how to resolve this issue..
Thanks

Hi,
Simply remove the ldap folder from $domain_home/server/AdminServer/data/ and try.

Multiple Several Users password reset

Dears,
Please confirm is there any way in SAP to reset password of several users simentaneously.
Shivam

Hi,
you can do it using LSMW transaction .
You can find the steps to do this here
https://www.sdn.sap.com/irj/scn/wiki?path=%3fpath=/display/abap/lsmw%252bsteps%252bin%252bdetail
Then go to Code gallery->Home->LSMW for changing mass passwords
Follow them
Let me know of any questions
Rohit

APEX ADMIN user password Reset issue

Hello All,
I am trying to reset the password for ADMIN user using following script (taken apxchpwd.sql) from SQL Developer. I have connected to database as user with DBA privileges.
alter session set current_schema = APEX_040000;
begin
    wwv_flow_security.g_security_group_id := 10;
    wwv_flow_security.g_user := 'ADMIN';
    wwv_flow_security.g_import_in_progress := true;
    for c1 in (select user_id
                 from wwv_flow_fnd_user
                where security_group_id = wwv_flow_security.g_security_group_id
                  and user_name = wwv_flow_security.g_user) loop
        wwv_flow_fnd_user_api.edit_fnd_user(
            p_user_id       => c1.user_id,
            p_user_name     => wwv_flow_security.g_user,
            p_web_password => 'newPassword',
            p_new_password => 'newPassword');
    end loop;
    wwv_flow_security.g_import_in_progress := false;
end;
Commit;But I am getting following error.
session SET altered.
Error starting at line 2 in command:
begin
    wwv_flow_security.g_security_group_id := 10;
    wwv_flow_security.g_user := 'ADMIN';
    wwv_flow_security.g_import_in_progress := true;
    for c1 in (select user_id
                 from wwv_flow_fnd_user
                where security_group_id = wwv_flow_security.g_security_group_id
                  and user_name = wwv_flow_security.g_user) loop
        wwv_flow_fnd_user_api.edit_fnd_user(
            p_user_id       => c1.user_id,
            p_user_name     => wwv_flow_security.g_user,
            p_web_password => 'newPassword',
            p_new_password => 'newPassword');
    end loop;
    wwv_flow_security.g_import_in_progress := false;
end;
Error report:
ORA-20001: Unauthorized access (security group package variable not set).
ORA-06512: at "APEX_040000.WWV_FLOW_FND_USER_API", line 22
ORA-06512: at "APEX_040000.WWV_FLOW_FND_USER_API", line 1625
ORA-06512: at line 12
commited.Database Version: Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
APEX Version: 4.0.2.00.07
Can someone let me know what is the issue?
Regards,
Hari

Hello All,
Our DBA has ran the script apxchpwd.sql as SYS and it went fine. But still we are unable to login into INTERNAL schema with ADMIN user. Any thoughts?
Only thing I need to check is APEX user.
alter session set current_schema = APEX_040000;But that is correct.
Where and how can I check the apex INTERNAL workspace user ADMIN status?
Regards,
Hari

5508 WLC - 7.0.98.218 - Local users password reset

We are required to change passwords every so often at my job. I am trying to change the password for one of the local user accounts on a 5508 WLC running 7.0.98.218 - How can I accomplish this task? The option I get is to remove the users. Any help would be much appriciated.
Thanks,
marramix01

Hi,
I think ur speaking about LOCAL NET USERs list on the WLC..
I am able to change that on my WLC..
its .. WLC GUI >> SECURITY >> LOCAL NET USERS >> Client on the local user >> Edit it >> Apply.
Clisk on the name which is under USERNAME and u wil be able to edit it!!
Lemme know if this helps and please dont forget to rate the usefull posts!!
Regards
Surendra

USER PASSWORD RESET OPTION

Hi,
We have published our server through ITS. Once users logged on they access through Webui. I would like to provide users the option for themselves to change their own password.Please suggest how to achieve this
Regards
D.Mukundan

Hi,
You can provide the custom screen for changing the password.
Standard FM's are available to change the password.
ME_USER_CHANGE_PASSWORD
But, I think you should go with the standard password change mechanism which is the normal login screen where user logs into web ui.
Regards,
Naresh

Disable user password reset

Similar Messages

Maybe you are looking for