-
Book Overview & Buying
-
Table Of Contents
-
Feedback & Rating
Microsoft Forefront Identity Manager 2010 R2 Handbook
By :
The goal for SSPR is, usually, to reset the password of users' account in Active Directory, but the SSPR feature in FIM is not limited to that. It can be used to reset passwords in other CDSs as well.
In order for FIM to change the password of a user in AD (or any other CDS), the account used by FIM needs to have the Reset password permission in AD, or a similar permission in another CDS:

In Management Agents for the target CDS, in this case the AD, we need to check the Enable password management checkbox:

If we then look at the settings, we can make some adjustments, as shown in the following screenshot:

The Unlock locked accounts when resetting passwords option is not enabled by default, but I would think that most implementations of SSPR will use that setting. It might be that the user actually locked his own account before realizing he forgot his password.
The Management Agent for AD is now ready for SSPR.
Change the font size
Change margin width
Change background colour