About SteveGrant_

SteveGrant_ · ‎06-04-2008

Hi there, Thanks for replying. The servers are allowed via a subnet destination rule. I've being doing some packet tracing, and when a password is changed Windows needs to talk to a DC. It uses DNS to track this down, but the packet capture revealed that this was not going via SAM - it was trying to go direct. Obviously it couldn't as all of the DCs are down the SAM tunnel. Orginally I thought it was LSASS.EXE being set to pass-through, but this is now explictly entered as an application be to SAM'd. This still doesn't work. Any other ideas? Thanks, Steve

SteveGrant_ · ‎06-04-2008

Hi everyone, I'm having difficulty determining the correct rules to allow my Windows users to be able to change their AD passwords using WSAM. Due to security requirements Network Connect cannot be used - which would have been easier to do this. Other applications such as IE and Outlook work fine down SAM, but not password changes. If a user attempts to change their password using ALT-CTRL-DEL, they fill in the details and press enter. After a brief pause it reports an error saying that it cannot find a domain controller. Looking in the SAM log it looks like the machnie never even attempts to communicate, it looks like the traffic gets stuck locally. Have any of you managed to implement this? I am using IVE 5.5 at the moment. Many thanks, Steve

Re: WSAM and Windows password changes

WSAM and Windows password changes