Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Read this guide to learn how to set up self-service password reset for Active Directory users.

Step 0: Review Problem Background and Overview

Whenever users need to change their Active Directory password, they call the Service Desk team. This is time-consuming and unsustainable.

So, your manager asked you to configure a tool that allows users to change their passwords.

I will walk you through the steps to complete this task in this guide.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
TechGarden Wired Number Pad, USB Numeric Keypad 19 Key Number Keypad Keyboard for Laptop PC Computer Notebook, Big Print Letters - Black
  • Easy to Use - Our USB wired numpad does not require any driver or battery; easy to install, plug and play, gives you a stable connection.
  • Quiet & Soft Touch - Integrated ergonomic tilt provides comfortable typing, helps reduce the wrist strain. Low noise of the 19-key USB numeric keypad gives you a quiet and soft touch.
  • USB Wired Number Pad - Full-size 19mm keys improve speed and accuracy by making it easier to locate and press the numbers you are looking for. Numeric keypad supports NumLock.
  • Lightweight & Portable - The black numeric keypads are perfect for working on spreadsheet, you can works household, school, business trips, or daily use, very convenient number use.
  • Wide Compatibility - Compatible for Windows 2000, XP, Vista, or Windows 7/8/10, Android operating systems. Works with PC, desktop, notebook and other devices with USB ports.
I’m using a Windows Server 2022 Standard server for my test configuration. The server must be a member of the domain, and you must sign in to it with your domain credentials.

Step 1: Install Remote Desktop Web Access and IIS Web Server

  1. From the Server Manager Manage menu, select Add Roles and Features.
From the Server Manager Manage menu, select Add Roles and Features.
  1. When the Add Roles and Features wizard opens, click Next until you get to the Server Roles page. Then, check Remote Desktop Services and Web Server (IIS). When you check Web Server (IIS), the wizard dispays a pop-up, select Add Features in the pop-up.
When the Add Roles and Features wizard opens, click Next until you get to the Server Roles page. Then, check Remote Desktop Services and Web Server (IIS). When you check Web Server (IIS), the wizard dispays a pop-up, select Add Features in the pop-up.
  1. Confirm that the two roles are checked. Then, click Next.
Confirm that the two roles are checked. Then, click Next.
  1. Continue clicking Next until you get to Remote Desktop Services Role Services. Check Remote Desktop Web Services, then, click the Add Features button in the pop-up.
Continue clicking Next until you get to Role Services. Check Remote Desktop Web Services, then, click the Add Features button in the pop-up.
  1. After that, click Next several times until you get to the Confirmation page. Click Install to install the Windows Server roles.
After that, click Next several times until you get to the Confirmation page. Click Install to install the Windows Server roles.
  1. Wait for the wizard to confirm that the roles have installed successfully, the close it.
Wait for the wizard to confirm that the roles have installed successfully, the close it.

Step 2: Enable the Password Reset Feature in IIS RDWeb

  1. Search for and open IIS.
Search for and open IIS.
  1. In the IIS Manager, expand the Server name, then navigate to Sites > Default Web Site > RDWeb and left-click Pages. On the details pane, double-click Application Settings.
In the IIS Manager, expand the Server name, then navigate to Sites > Default Web Site > RDWeb and left-click Pages. On the details pane, double-click Application Settings.
  1. On the Application Settings page, double-click PasswordChangeEnabled and change its Value from false to true.
On the Application Setttings page, double-click PasswordChangeEnabled and change its Value from false to true.

Step 3: Configure HTTPS Binding in the Remote Desktop Web Site

By default, the Remote Desktop Web Site in IIS is configured to use HTTPS. Meanwhile, to use HTTPS, you require a certificate.

If you’re configuring self-service password reset for production use, I recommend purchasing a publicly signed certificate from a certificate authority.

Rank #2
Sale
Logitech K120 Full Size Wired Keyboard USB Plug-and-Play Windows - Black
  • All-day Comfort: The design of this standard keyboard creates a comfortable typing experience thanks to the deep-profile keys and full-size standard layout with F-keys and number pad
  • Easy to Set-up and Use: Set-up couldn't be easier, you simply plug in this corded keyboard via USB on your desktop or laptop and start using right away without any software installation
  • Compatibility: This full-size keyboard is compatible with Windows 7, 8, 10 or later, plus it's a reliable and durable partner for your desk at home, or at work
  • Spill-proof: This durable keyboard features a spill-resistant design (1), anti-fade keys and sturdy tilt legs with adjustable height, meaning this keyboard is built to last
  • Plastic parts in K120 include 51% certified post-consumer recycled plastic*

Since I am configuring mine for test purposes, I will be creating and using a self-signed certificate.

Task 3.1: Create a Self-signed Certificate

Open PowerShell as an administrator and run the command below to create a self-signed certificate.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
havit Bluetooth Number Pad Wireless Numeric Keypad Numpad 26 Keys Portable Mini Financial Accounting Rechargeable Numeric Pad for Windows Laptop Desktop, PC, Notebook (Black)
  • Widely Compatibility: This Bluetooth number pad is compatible with PC, laptop, desktop and computers running Windows systems. Note: This number pad does NOT support Mac OS systems
  • Multi-function 26-key Keypad: With NumLock, ESC, Delete and a shortcut key which can open the computer calculator directly etc.The number keyboard is more unique in that it can be combined into 3 currency symbols through Fn+composite keys
  • Bluetooth Number Pad Rechargeable: The wireless numeric keyboard with rechargeable lithium battery, avoid continuous battery consumption and battery replacement. This numeric keypad uses the latest stable buletooth 3.0 connection,plug and play, no delay and caton, fast data transmission, and working range is up to 33FT
  • Comfortable Numeric Pad: With quiet SCISSOR-SWITCH KEYS provides a comfortable and smooth typing experience, quick response and good tactile rebound, keep the office quiet and improve work efficiency.15° tilt design fits the human body habits, great for spreadsheets worker, accounting staff and financial officer
  • Long Using Time Keypad: The wireless numpad with a large capacity lithium battery, usually can use 1-2 months after fully charged (charged with the provided USB-A to USB-C cable). It will enter the sleep function after being idle for 1 hour, press any key to wake up
Change the Dnsname, IPMvWAC, to your server name.
New-SelfSignedCertificate -FriendlyName ad-ss-cert -DnsName IPMvWAC -KeyUsage DigitalSignature
New-SelfSignedCertificate -FriendlyName ad-ss-cert -DnsName IPMvWAC -KeyUsage DigitalSignature

Task 3.2: Configure IIS HTTPS Binding to use the Certificate

  1. Back in the IIS Manager, left-click Default Web Site, then in the Actions menu, select Bindings.
Back in the IIS Manager, left-click Default Web Site, then in the Actions menu, select Bindings.
  1. Then, on the Site Bindings pop-up, left-click https and then Edit.
Then, on the Site Bindings pop-up, left-click https and then Edit.
  1. Finally, on the Edit Site Bindings pop-up, select the self-signed certificate from the SSL Certificate drop-down and click OK. If you receive a confirmation pop-up, select yes.
Finally, on the Edit Site Bindings pop-up, select the selft-signed certificate from the SSL Certificate drop-down and click OK.
  1. Return to the PowerShell console and run the iisreset command.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Step 4: Test the Self-service Password Change Remote Desktop Web Site

  1. From a browser on the local server where you configured the self-service password reset, open the URL below:
https://127.0.0.1/RDWeb/Pages/en-US/password.aspx
  1. You’ll receive a certificate warning. Click Advanced, then Continue.
You'll receive a certificate warning. Click Advanced, then
You'll receive a certificate warning. Click Advanced, then Continue.

The site displays the page for changing an AD password.

The site displays the page for changing an AD password.
The site displays the page for changing an AD password.

If your users receive the error message – “Your new password does not meet the length, complexity, or history requirements of your domain. Try choosing a different new password.” – modify your domain password policy.

Rank #4
Sale
Wireless Number Pad with USB to USB-C Adapter, Numeric Keypad Numpad 28 Keys Portable 2.4 GHz Accounting Number Keyboard, 10 Key USB Keypad for Laptop, PC, Desktop, Surface Pro, Notebook - Pink
  • Reliable 2.4GHz Wireless & Dual Adapters – Enjoy stable, lag-free connection with the included USB receiver and USB-C adapter, effortlessly switching between devices with different ports.
  • Full 28-Key Layout with Shortcuts – Dedicated number keys, tab, esc, backspace, = + - * /, % () $, and more streamline financial accounting, spreadsheets, and data entry tasks, boosting your workflow.
  • Universal Plug-and-Play Compatibility – Works right out of the box with Windows, PC, laptop, desktop, Surface Pro, and notebook; no driver installation required.
  • Slim, Lightweight & Portable – The ultra-slim profile easily slips into a laptop bag or pocket, making it a perfect on-the-go companion for accountants, analysts, and students.
  • Important System Note – All keys and hotkeys work seamlessly on Windows system. While on iOS and macOS, all number keys, = + - * / % () $ function perfectly, but hotkeys/shortcut like Numlock, Home, End, Pgup, PgDn,↑←↓→ keys are not supported due to system limitations; this does not affect standard numeric entry.
If the password reset does not work, ensure that the Forms Authentication in Sites > Default Web Sites > RDWeb > Pages is enabled.
If the password reset does not work, ensure that the Forms Authentication in Sites > Default Web Sites > RDWeb > Pages is enabled.

Conclusion

Providing your users with a way to reset their passwords without contacting the Service Desk is a time saver. In this hands-on guide, I have explained the steps to enable self-service password reset using Remote Desktop Web services.

The first step is to install the IIS web server and the Remote Desktop Web Access Windows Server roles. After that, configure the PasswordChangeEnabled feature of the RDWeb site in IIS.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Finally, configure SSL and you’re good to go.