Export Local Account Password amax 6/21/2007 4:17:00 AM Users work on a Terminal Server (12GB). This server runs as a workgroup (not as a domain). Each user on the Terminal Server retrieves their emails from an Exchange Server (SBS), which is a domain controller with active directory. It works well but passwords are set manually and the Terminal server (12GB) must have the same password as the Exchange Server (SBS) I am looking for a script that will prompt user logging onto Terminal Server (12GB) to change password, which will then export the new password to the Exchange Server (SBS) active directory. In other words synchronize passwords between the local user account and the active directory. Thank you

Re: Export Local Account Password "Lanwench [MVP - Exchange]" <lanwench[ at ]heybuddy.donotsendme.unsolicitedmailatyahoo.com> 6/21/2007 12:50:48 PM amax <amax[ at ]discussions.microsoft.com> wrote: [Quoted Text] > Users work on a Terminal Server (12GB). This server runs as a > workgroup (not as a domain). > Each user on the Terminal Server retrieves their emails from an > Exchange Server (SBS), which is a domain controller with active > directory. It works well but passwords are set manually and the > Terminal server (12GB) must have the same password as the Exchange > Server (SBS) > > I am looking for a script that will prompt user logging onto Terminal > Server (12GB) to change password, which will then export the new > password to the Exchange Server (SBS) active directory. In other > words synchronize passwords between the local user account and the > active directory. > > Thank you I don't know of any way to do this, but seriously I'd back up a step.....since you've got AD, why is this a standalone server, rather than a member server? It doesn't make a lot of sense. Join it to the domain and your users will have only one login/password - and you'll be able to control a lot more things that way (including the use of group policy).

Re: Export Local Account Password amax 6/21/2007 3:18:01 PM Good idea. If I join the terminal server as a member server on the domain. Will I lose all settings for the local users already setup on the terminal server (Workgroup)? "Lanwench [MVP - Exchange]" wrote: [Quoted Text] > amax <amax[ at ]discussions.microsoft.com> wrote: > > Users work on a Terminal Server (12GB). This server runs as a > > workgroup (not as a domain). > > Each user on the Terminal Server retrieves their emails from an > > Exchange Server (SBS), which is a domain controller with active > > directory. It works well but passwords are set manually and the > > Terminal server (12GB) must have the same password as the Exchange > > Server (SBS) > > > > I am looking for a script that will prompt user logging onto Terminal > > Server (12GB) to change password, which will then export the new > > password to the Exchange Server (SBS) active directory. In other > > words synchronize passwords between the local user account and the > > active directory. > > > > Thank you > > I don't know of any way to do this, but seriously I'd back up a > step.....since you've got AD, why is this a standalone server, rather than a > member server? It doesn't make a lot of sense. Join it to the domain and > your users will have only one login/password - and you'll be able to control > a lot more things that way (including the use of group policy). > > >

Re: Export Local Account Password "Lanwench [MVP - Exchange]" <lanwench[ at ]heybuddy.donotsendme.unsolicitedmailatyahoo.com> 6/21/2007 3:33:54 PM amax <amax[ at ]discussions.microsoft.com> wrote: [Quoted Text] > Good idea. If I join the terminal server as a member server on the > domain. Will I lose all settings for the local users already setup on > the terminal server (Workgroup)? Yes - but check out http://www.forensit.com/index.htm, maybe. I've never used it. I tend to re-create profiles when joining a domain (copying out any specific data, such as favorites, etc). Note that in each user's ADUC properties, you should specify a Terminal Services profile path - this should not be the same path you use for roaming profiles (if you use those). Also,make sure you're using folder redirection via group policy for all your users - for My Documents, absolutely...and for Desktop also if you wish. For specific help with that, you might crosspost a single message to microsoft.public.windows.group_policy and microsoft.public.windows.terminal_services. For TS, you will probably need to look into loopback processing. > > "Lanwench [MVP - Exchange]" wrote: > >> amax <amax[ at ]discussions.microsoft.com> wrote: >>> Users work on a Terminal Server (12GB). This server runs as a >>> workgroup (not as a domain). >>> Each user on the Terminal Server retrieves their emails from an >>> Exchange Server (SBS), which is a domain controller with active >>> directory. It works well but passwords are set manually and the >>> Terminal server (12GB) must have the same password as the Exchange >>> Server (SBS) >>> >>> I am looking for a script that will prompt user logging onto >>> Terminal Server (12GB) to change password, which will then export >>> the new password to the Exchange Server (SBS) active directory. In >>> other words synchronize passwords between the local user account >>> and the active directory. >>> >>> Thank you >> >> I don't know of any way to do this, but seriously I'd back up a >> step.....since you've got AD, why is this a standalone server, >> rather than a member server? It doesn't make a lot of sense. Join it >> to the domain and your users will have only one login/password - and >> you'll be able to control a lot more things that way (including the >> use of group policy).

Re: Export Local Account Password "Al Dunbar" <AlanDrub[ at ]hotmail.com.nospaam> 6/22/2007 2:59:57 AM Great that you are going the domain route. Not only is it simpler, it would be more secure to have a single password per user than to try to roll your own password synchronization tool. One of the dangers of having a script to which the user inputs a valid password is that the script could be hacked to save that script for nefarious purposes. /Al "amax" <amax[ at ]discussions.microsoft.com> wrote in message news:140CA20F-5DF9-4257-872B-D58B4AF1ABB1[ at ]microsoft.com... [Quoted Text] > Good idea. If I join the terminal server as a member server on the domain. > Will I lose all settings for the local users already setup on the terminal > server (Workgroup)? > > "Lanwench [MVP - Exchange]" wrote: > >> amax <amax[ at ]discussions.microsoft.com> wrote: >> > Users work on a Terminal Server (12GB). This server runs as a >> > workgroup (not as a domain). >> > Each user on the Terminal Server retrieves their emails from an >> > Exchange Server (SBS), which is a domain controller with active >> > directory. It works well but passwords are set manually and the >> > Terminal server (12GB) must have the same password as the Exchange >> > Server (SBS) >> > >> > I am looking for a script that will prompt user logging onto Terminal >> > Server (12GB) to change password, which will then export the new >> > password to the Exchange Server (SBS) active directory. In other >> > words synchronize passwords between the local user account and the >> > active directory. >> > >> > Thank you >> >> I don't know of any way to do this, but seriously I'd back up a >> step.....since you've got AD, why is this a standalone server, rather >> than a >> member server? It doesn't make a lot of sense. Join it to the domain and >> your users will have only one login/password - and you'll be able to >> control >> a lot more things that way (including the use of group policy). >> >> >>