Way to allow administrators to change or reset user passwords

fbasharepointsharepoint-2007

We have a custom MembershipProvider implementation using form-based authentication (FBA) under Sharepoint 2007.

I've searched high and low on Google, but only found:

Active directory and FBA implementations to allow users to change their own password
Active directory instructions (including video!) for administrators to change other users' passwords

Have we missed an option to enable the latter under FBA? Should this work by default and is the MembershipProvider misbehaving?

The procedure to do this as under active directory would be ideal, but the "Change Password" link does not appear in the Edit User screen. We verified that the logged-in user is a site collection administrator.

Best Answer

You need to add appropriate option by yourself.

You can see example implementation in the CKS FBA project at CodePlex:

page UserEdit.aspx contains button BtnReset,
when it is clicked, method OnResetPassword from file UserEdit.cs is called.

Related Solutions

Sharepoint 2007: Active Directory and Sharepoint Groups

You're right... out of the box, having SharePoint groups with thousands (or even hundreds) of individual users will be an administration nightmare.

Unfortunately SharePoint doesn't sync AD users with with AD (profiles, yes. users, no.), so once you have manually add a user to a SharePoint group or manually grant permissions to an individual user, they will remain in Sharepoint for all time (until you manually remove them), even if you remove that user from AD.

If you assign permissions to SharePoint groups holding AD groups, you gain the benefit that once a user is removed from AD, they no longer have permissions on SharePoint. It is so much easier to manage group membership in a single location (with good tools) than it is to manage group membership twice.

Long story short, I would suggest trying to figure out the problem you are hitting with audiencing before I would suggest putting a thousand users in SharePoint groups. If you absolutely must do so, don't do it with out of the box tools... invest in Quests's Site Administrator for SharePoint (http://www.quest.com/site-administrator-for-sharepoint/)

Locked out of Sharepoint (but I’m admin!)

Can you try this?

http://technet.microsoft.com/en-us/library/cc262811.aspx

stsadm -o setsitelock 

   -url <URL name> 

   -lock {none | noadditions | readonly | noaccess}

Best Answer

Related Solutions

Sharepoint 2007: Active Directory and Sharepoint Groups

Locked out of Sharepoint (but I’m admin!)

Related Topic