Virto Password Reset Web Part – Installation and …...- Microsoft Windows SharePoint Services v3 or Microsoft Office SharePoint Server 2007; - Microsoft .NET Framework 3.5; Note:

Virto Password Reset and Recovery Web Part for SharePoint

Release 3.1.1

Installation and User Guide

2

Copyright©2016Allrightsreserved.www.virtosoftware.com

TableofContents

OVERVIEW.................................................................................................................................................................................3

SYSTEMREQUIREMENTS...........................................................................................................................................................4

OPERATINGSYSTEM...............................................................................................................................................................................4SERVER.................................................................................................................................................................................................4BROWSER.............................................................................................................................................................................................4

INSTALLATION............................................................................................................................................................................4

INSTALLINGVIRTOSHAREPOINTPASSWORDRESETANDRECOVERYWEBPARTFORSHAREPOINT..................................................................4LICENSEACTIVATION..............................................................................................................................................................................7UPGRADINGVIRTOSHAREPOINTPASSWORDRESETANDRECOVERYWEBPART............................................................................................7UNINSTALLINGVIRTOSHAREPOINTPASSWORDRESETANDRECOVERYWEBPART........................................................................................8

USECASES..................................................................................................................................................................................8

RESETTINGPASSWORDFROMASITEWITHANONYMOUSACCESS................................................................................................................8USINGSECURITYQUESTIONSFORPASSWORDRESETTING.........................................................................................................................14

ADMINISTRATIONANDUSAGE...............................................................................................................................................18

ADDINGTHEWEBPARTTOAPAGE.......................................................................................................................................................18VIRTOPASSWORDRESETANDRECOVERYADMINISTRATION.....................................................................................................................19

ActiveDirectoryAuthentication...............................................................................................................................................19FormBasedAuthentication......................................................................................................................................................20SecurityQuestions......................................................................................................................................................................21EmailRequest.............................................................................................................................................................................23

VIRTOPASSWORDRESETUSAGE...........................................................................................................................................................25SecurityQuestion.......................................................................................................................................................................25EmailRequest.............................................................................................................................................................................26

VERSIONRELEASEHISTORY.....................................................................................................................................................27

3


VirtoPasswordResetandRecovery3.1.1forSharePoint

OverviewThiswebpartisusedforquickandsimpleresolvingofsituationswhenauserforgetshispasswordorthepassword isexpiredaccordingtopasswordsecuritypolicy. If there isnosuchatool,usermustcontacthisADadministratoreverytimeheneedstochangethepassword.Virto SharePoint Password Reset and Recovery Web Part is added to the SharePoint byadministratorwhoadjuststhecomponent.Youcanfinddetailed informationaboutthewebpartadjustmentinInstallationandUserGuide. BesidestheabilitytoaddWebParttotheSharePointsitepage,administratorcanalsoaddittoanypageofotherweb-portalwiththehelpofadditionalASP.NETsourcecodesuppliedwiththecomponent.AnyuserauthorizedontheSharePointsitewithADlogin(includingcasesofremoteaccesstotheportal)canrequestaconfigurationofnewpassword.Andthisdoesnotmeanthathecanchangetheconfigurationofthewebpart.TherealsocanbeasituationwhenusercannotbeauthorizedontheSharePointsite,butneedstoenter it. For such cases the web part can be installed on a special WSS SharePoint site withanonymous access. Thiswill help userswithout ability to logon to SharePoint site to reset theirpassword.Therearetwowaysofworkingwithpasswords–requestanewpasswordonthesiteonlineorbyemail. According to security policy in the first case before the password changing, user will beoffered to answer some security questions (from one to three). Security questions are set bysystemadministratorandthevaluesaretakenfromcorrespondingfieldsofADprofile(forinstance,dateofbirth,mobilephoneandetc.).FormBasedauthenticationisincludedintothelistoffeaturesofVirtoSharePointPasswordResetandRecoveryWebPart.

4


SystemRequirementsOperatingSystemMicrosoftWindowsServer2003,2008,2012ServerSharePointRelease2013:-MicrosoftWindowsSharePointFoundation2013orMicrosoftOfficeSharePointServer2013;-Microsoft.NETFramework4.5;SharePointRelease2010:-MicrosoftWindowsSharePointFoundation2010orMicrosoftOfficeSharePointServer2010;-Microsoft.NETFramework3.5;SharePointRelease3:-MicrosoftWindowsSharePointServicesv3orMicrosoftOfficeSharePointServer2007;-Microsoft.NETFramework3.5;Note:ThisproductisnotcompatiblewithSPS2003andWSSv2.BrowserMicrosoftInternetExplorer7orhigher.

InstallationThissectiondescribeshowtoinstall,upgrade,uninstall,orcontactSupportfortheVirtoSharePointPasswordResetandRecoveryWebPart.InstallingVirtoSharePointPasswordResetandRecoveryWebPartforSharePoint Beforeyoubegin,youneedtomakesureyouhaveaccesstotheserverandyouraccounthastheappropriateadministrativeprivilegestoinstallapplications.The Virto SharePoint Password Reset and Recovery setup program provides links to the variousinstallationcomponentsforthePasswordReset.To access the Virto SharePoint Password Reset and Recovery Setup program downloadVirto.SharePoint.20XX.PasswordResetWebPart.zip file and unzip it. OpenVirto.SharePoint.20XX.PasswordResetWebPartfolderandrunextractedSetup.exefile.

5


Thesetupwizardwindowwillappear.

Virto SharePoint Password Reset and Recovery setupwizard performs a system check prior to theinstallation. All the system checks must be completed successfully in order to proceed with theinstallation.Afterthecheckshavecompleted,click“Next”.

6


Selectthewebapplication(s)whereyouwanttoinstalltheproduct.

Warning:YoumustbeloggedintotheSharePointserverwithaSiteCollectionAdministratoraccounttoautomaticallyactivatethisfeature.

7


Thenclick“Next”.

Click“Close”.Theinstallationcompleted.Note:installationprocedureissimilarforSharePoint2007,2010and2013versions.LicenseActivationToseefullinstructionforsuccessfulactivationofyourcomponent,pleasereadourblog.

UpgradingVirtoSharePointPasswordResetandRecoverywebpartIfyoualreadyuseVirtoSharePointPasswordResetandRecoverywebpartandneedtoupgradeittothelatestversion,downloadthe.zipfilefromhttp://www.virtosoftware.com.Unzipthefileandrunsetup.exeasitisdescribedintheInstallingVirtoSharePointPasswordResetandRecoverysection.Note:itishighlyrecommendedtoexitLicenseManagerbeforeupgrading.IfyouneedtouseLicenseManager,runitafterupgrading.Onthestep3checkthebox“Upgrade”andclick“Next”.Note:ifyouhadactivatedthelicensewhileinstallingthepreviousVirtoSharePointPasswordResetandRecoverywebpartversion,youdonotneedtoactivateitnow.

8


UninstallingVirtoSharePointPasswordResetandRecoverywebpartTouninstalltheWebPart:

1. Double click the Setup.exe extracted from downloadedVirto.SharePoint.20XX.PasswordResetWebPart.zipfile.

2. The program performs the system checks again. Once that has successfully completed, theprogrampromptsyoutoRepairorRemovethesolution.SelectRemove,andclick“Next”.

UseCasesResettingPasswordfromaSitewithAnonymousAccessSituation:SharePointsiteusesWindowsAuthenticationandusers’profilesarestoredinActiveDirectory.AusertriestologontoSharePointsiteofhiscompanybuthehasforgottenthepassword.Heneedstochangehispasswordandenterthesite.Solution:ThisusercannotlogontoSharePointsite.ButhecannavigatetoSharePointWSSsitewithanonymousaccess (created by SharePoint administrator before) and use Virto SharePoint Password Reset andRecoverywebpartinstalledonit.AsaresultuserreceiveshispasswordforaccesstoSharePointsite.

9


Howtoimplement:ToimplementthesolutionandmakeitpossibleforSharePointuserstoresettheirpasswordwhentheycannotlogontoSharePointsite,thefollowingactionsmustbedone:

1. SharePointWSSsitewithanonymousaccessshouldbecreated.2. VirtoSharePointPasswordResetandRecoverywebpartshouldbeinstalledonWSSsite.3. SharePointusersmustbe informedabout this siteexistenceorautomatic redirect forwrong

passwordcasescanbeadjusted.4. VirtoSharePointPasswordResetandRecoverywebpartmustbeadjusted(securityquestionor

emailoption,seeVirtoPasswordResetAdministrationsection).

DetailedInstruction:

1) GotoCentralAdministrationsite(“ApplicationManagement”->“ManageWebApplication”)

2) Choose“Webapplication”fromthelist.Click“AuthenticationProviders”ontheribbon.

10


3) Chooseaproviderfromthelist.

4) Checkthebox“Enableanonymousaccess”forrequiredWebApplication.

11


NowtheabilitytoselectanonymousaccesstositesisaddedtotheWebApplication.

5) Goto“Sitecontents”in“SiteAdministration”sectionandcreateaNewsite.

12


6) Enteryoursitename.Select“BlankSite”templateandcheck“Useuniquepermissions”inthe

“Permissions”group.Click“Create”.

7) Nowgotothecreatedsite->Sitesettings.Click“Sitepermissions”in“UsersandPermissions”section.

13


8) Goto“Settings”->“AnonymousAccess”.Checkthebox“EntireWebsite”foranonymousaccesssettings.

NowPasswordResetsitecanbeaccessedwithanonymousauthentication.

9) ThenaddVirtoResetandRecoveryWebParttothefirstpageofthissite(seeVirtoPasswordResetAdministrationsection)andconfigureit.Nowusercangetanonymousaccesstothispageandresethispassword.

14


UsingSecurityQuestionsforPasswordResettingSituation:Userforgetsthepassword.Howtoresetthepasswordwithananswertoasecurityquestion?Howthisanswerisdefined?Solution:Userdefinesananswertoasecurityquestionwhenhefillsoutaspecial field. Informationfromthisfieldwillbeverifiedandiftheansweriscorrect,passwordwillbereset.Howtoimplement:TwowebpartsareinstalledonaSharePointsite–VirtoActiveDirectorySelfUserServiceandVirtoPasswordResetandRecoveryWebPart.Thefirstwebpartallowsusertosetananswertoasecurityquestion(valueofthespecialfield),thesecondwebpartenablestoresetthepasswordwhenuserforgetsit.Thefollowingactionsmustbedone:1. VirtoActiveDirectorySelfUserServiceinstalling.2. Addingspecialfieldwhichwillcontainanswertoasecurityquestion.3. VirtoPasswordResetandRecoveryWebPartinstalling.4. Selectingfield(createdin3)inthePasswordResetandRecoveryWebPartsettingsforsecurity

questionanswer.

DetailedInstruction:ForSharePointsiteadministratorInstallVirtoActiveDirectoryUserService.Thengoto“SiteActions–SiteSettings”.Followthelink“VirtoActiveDirectoryServiceSettings”.

15


Click“ManageFields”anduse“AddField”toaddnewfieldtothelist.

Enter required data and pay attention to the field “AD Name” (corresponding field from ActiveDirectory).

16


Click“OK”.

ThefieldwillappearintheActiveDirectorySelfUserServiceWebPart.

GotothesitewhereVirtoPasswordResetandRecoveryWebPartisinstalled.Use“EditWebPart”.Adjust web part for security question (see User Guide). Define the field (created with the ActiveDirectoryUserService)asafieldwithananswertosecurityquestion.

17


Click“OK”.ForuserGo to SharePoint sitewhere the ActiveDirectoryUser Service is installed. Fill out the field “SecureAnswer(Pet’sName)”.Click“Save”.

WhenuserforgetshispasswordGotothesitewithanonymousaccess(contactyouradministrator).

Enteranswertothesecurityquestion.Click“Submit”.Iftheanswerisincorrect,amessagewillappear.

18


Whentheansweriscorrect,passwordwillbedisplayedandsentbye-mail.

AdministrationandUsage

AddingtheWebParttoaPage

GotoSharePointsitewhereyouwanttoaddthewebpartandopen“SiteActions-Editpage”.

Youwillswitchtoeditmode.Click“AddaWebPart”.

SelectVirtoPasswordResetandRecoveryWebPartforSharePointatthebottomofthelistandclick“Add”.Onceyouhaveclicked“Add”button,use“Exiteditmode”button.

19


VirtoPasswordResetandRecoveryAdministrationOnceyouhaveaddedVirtoPasswordResetandRecoverywebparttothesitepage,youhavetoadjustit.Use“EditWebPart”intheupperrighthandcornerofthepage.TheWeb Part settings will be displayed. SharePoint administrator adjusts the system according topasswordsecuritypolicy.ActiveDirectoryAuthentication

Check thebox“Showpassword touser” ifyouwant toshowpasswordon thesitepagewhenuserresetsit.Ifyoudefinepagepublicurl,externaluserswillbeabletoresetpasswordandreceiveanewonewithusingthispubliсurl.ActiveDirectoryauthenticationenablesusers toenter thesame loginandpassword to logonto theSharePointsiteasforloggingtoWindowssystem.InthiscaseautomaticSharePointauthenticationcanbeadjusted.There are two options for password reset: security questions and email request. See the sectionsbelow.

20


FormBasedAuthenticationTouseformbasedauthentication(passwordisdefinedspeciallyforloggingtoSharePointsite),selectitinthe“PasswordRestConfiguration”block.

Formbasedauthenticationallowsonlyonetypeofpasswordreset–“Usingemailaddress”.Thismeansthatpasswordwillbesentbyemailaccordingtothesystemsettings.Securityquestionoptionwillbedisabled.Checkthebox“Tosendconfirmingmessagebye-mail”,anduserwillreceiveemailwithlinktofollowbeforepasswordisreset.Ifyouuncheckthisbox,thepasswordwillbesentbyemailimmediatelywithnoadditionallinkstofollow.

NowdefineEmailoptionsforpasswordreset.

21


Typethesubjectandmessagetexttobedisplayedinthesystememailmessage.Ifyoucheckedthebox“Tosendconfirmingmessagebye-mail”,typethetextofconfirmingemailmessage.Nowclick“OK”tosavethesettingsandreturntothewebpart.Orclick“Apply”tosavethesettingsandcontinueadjustment(inthiscasethesettingsblockwillstayopened).SecurityQuestionsIncasesecurityquestionsareselected,userwhotriestoresetthepasswordwillhavetoanswersomequestions. And if theweb part identifies this user’s answers as correct ones, the passwordwill bechangedonline.Ifyouwanttousethisoptionforpasswordreset,select“Usesecurityquestions”.

Thendefineadministrativeoptions:enterdomainname,userprincipalnameandpassword.Thisdataisappliedforuserwhowillhaverightsforpasswordreset(webpartadministrator).

In this field you can apply a passwordpolicyto users formanorganizational unit and allow chosengroupstoresetpasswords.

22


Thencheckrequiredboxes:

1) UnlockAccountAutomatically–systemcanunlocklockeduser(accordingtosecuritysettings);2) Enable Account Automatically – disabled account can be enabled again for authentication

(accordingtosecuritysettings);3) Usermust change password at next logon– userwill have to change newpassword again

whenloggingtothesystemnexttime;4) CheckforvaliduserE-mail–thesystemwillcheckiftheenteredemailaddressisthesameas

emailaddressdefinedforActiveDirectory.

Now define security questions (from 1 to 3) and point corresponding Active Directory fields thatcontainanswerinformation.Thesystemwilldefineifuser’sanswersmatchthevaluesofcorrespondingActiveDirectoryfields.

23


Nowclick“OK”tosavethesettingsandreturntothewebpart.Orclick“Apply”tosavethesettingsandcontinueadjustment(inthiscasethesettingsblockwillstayopened).EmailRequestIncase“Usee-mailaddress”option isselected, thepasswordwillbesentbyemailaccordingtothesystemsettings.

Ifyoucheckthebox“Tosendconfirmingmessagebye-mail”,userwillreceiveemailwithlinktofollowbefore password is reset. If you uncheck this box, the password will be displayed on the pageimmediatelyandsentbyemailwithnoadditionallinkstofollow.Thendefineadministrativeoptions:enterdomainname,userprincipalnameandpassword.Thisdataisappliedforuserwhowillhaverightsforpasswordreset(webpartadministrator).

24


Note:youneedtoenterfullyqualifiedprincipalname(seetheexampleonthescreenshot).

NowdefineEmailoptionsforpasswordreset.

Typethesubjectandmessagetexttobedisplayedinthesystememailmessage.Ifyoucheckthebox“Tosendconfirmingmessagebye-mail”,typethetextofconfirmingemailmessage.Nowclick“OK”tosavethesettingsandreturntothewebpart.Orclick“Apply”tosavethesettingsandcontinueadjustment(inthiscasethesettingsblockwillstayopened).PasswordFormatAdministratorcandefinetheformatofpasswordwhichwillberequiredwhenpasswordresetting.Bydefaultnewpasswordmustcontainletters,digitsandspecificsigns.Incaseyouneedtochangethesesettings,gotowebpartsettings(“EditWebPart”)androlldownto“Passwordproperties”block.Checktherequiredboxes:

• Includeletterstopassword;• Includedigitstopassword;• Includespecificsignstopassword.

Whenalltherequiredboxesarechecked,click“OK”or“Apply”tosavethesettings.

25


VirtoPasswordResetUsageWhenVirtopasswordResetandRecoverywebpartisaddedtothepageofSharePointsiteitlookasfollows(dependingonwebpartconfiguration).

Userhastofillouttherequiredfields(pointedwith*)andclick“Submit”.Thenthepasswordwillbeshown(sent)touserdependingonwebpartconfiguration(seeprevioussection).SecurityQuestionIf thewebpartoffersyoutoanswersomesecurityquestions, typetheanswer inthecorrespondingfieldandclick“Submit”.

Iftheenteredinformationiscorrect,thepasswordwillbedisplayed.

26


EmailRequestIfthewebpartoffersyoutoenteremailaddress,theemailsendingisselectedforpasswordreset.Inthiscasetwopossibleoptionscanwork:

1) Thewebpartallowsenteringanyemail.Passwordwillbesenttothisemailafterthecheck.2) Thewebpartallowsenteringonlytheemaildefinedforuser inActiveDirectory. If theemail

addressisincorrect,thepasswordwillnotbesent.

Fillouttherequiredfieldsandclick“Submit”.

If the entered information is correct, the password will be sent to the pointed email address (orconfirmingemailmessageatfirst).

27


VersionReleaseHistoryReleaseDate Version Description

04/15/2016 v.3.1.1 [+]OptionforlimitingusersfromspecifiedOrganizationalUnitstoresetpasswordhasbeenadded.

09/09/2013 v.3.0.0 [*]Newlicensemanager09/20/2011 v.2.0.0 [+]ResettingpasswordforFBAusershasbeenadded.06/25/2010 v.1.3.0 [+]Abilitytochangewebpartlocalizationhasbeenadded.

[+]Frenchlocalizationhasbeenadded.[+]Optionforhidingpasswordonpagehasbeenadded.[+]Optionforpublicwebpartpageurlhasbeenadded.

02/04/2009 v.1.2.0 [+]Passwordcomplexitysettingareadded11/13/2009 v.1.1.0 [*]Userinterfaces

[-]SomefixesforErrorMessageSystem

09/29/2009 v.1.0.0

FirstRelease

[-]bugfixed[+]newfeaturesadded

Documents

Virto Password Reset Web Part – Installation and …...- Microsoft Windows SharePoint Services v3 or Microsoft Office SharePoint Server 2007; - Microsoft .NET Framework 3.5; Note: