lithnet / resourcemanagement-ui-assistedpasswordreset

Administrator-assisted pasword reset module for FIM 2010 and MIM 2016
MIT License
5 stars 1 forks source link

Acces denied: Password Reset #4

Closed alexvara closed 7 years ago

alexvara commented 7 years ago

My Trouble is when i try password reset to an user, send a red words, say.

Acces Denied.

what happened, something i did wrong?

ryannewington commented 7 years ago

Hi @alexvara,

That message indicates that you don't have permissions in Active Directory to reset passwords. Are you able to reset the user's password using the standard Active Directory Users and Computers tool?

Ryan

alexvara commented 7 years ago

Hi Rayan,

Yeah, i Guess yeah, but what kind permission need the account?

Because the account sync with Active Directory have enterprise admin permission.

Thanks.

Regards!

El 15 mar. 2017 5:16 p. m., Ryan Newington notifications@github.com escribió:

Hi @alexvarahttps://github.com/alexvara,

That message indicates that you don't have permissions in Active Directory to reset passwords. Are you able to reset the user's password using the standard Active Directory Users and Computers tool?

Ryan

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/lithnet/resourcemanagement-ui-assistedpasswordreset/issues/4#issuecomment-286909318, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AZN6W1HmyN0mXxliF2zsZ7VlJ6S0PT9Lks5rmHErgaJpZM4MeWkz.

alexvara commented 7 years ago

Ryan, I´ve check the permissions and is Ok.

Something more to do, I followed the instructions!

Regards,

ryannewington commented 7 years ago

@alexvara,

If you have confirmed that you can reset passwords directly in AD, and are still having problems, download and run dbgview (https://technet.microsoft.com/en-us/sysinternals/debugview.aspx) on the MIM portal server.

Ensure that the application is running with elevated administrative rights, and select "Capture Win32" and "Capture Global Win32"

image

Once it is running, attempt a password reset operation. Save the resulting dbgview log file and attach it to this ticket.

Ryan

alexvara commented 7 years ago

Ryan,

Jesus Olguin noticed that could add a line with Elevated Privileges, then he added SPSecurity.RunWithElevatedPrivileges(() =>

And the solution worked.

Thanks Rayan.

alexvara commented 7 years ago

Ryan,

Jesus Olguin noticed that could add a line with Elevated Privileges, then he added SPSecurity.RunWithElevatedPrivileges(() =>

And the solution worked.

Thanks Rayan.

AVJ

From: Ryan Newington [mailto:notifications@github.com] Sent: viernes, 17 de marzo de 2017 03:53 p.m. To: lithnet/resourcemanagement-ui-assistedpasswordreset resourcemanagement-ui-assistedpasswordreset@noreply.github.com Cc: Alejandro Vara Jimenez alejandro.vara@softtek.com; Mention mention@noreply.github.com Subject: Re: [lithnet/resourcemanagement-ui-assistedpasswordreset] Acces denied: Password Reset (#4)

@alexvarahttps://github.com/alexvara,

If you have confirmed that you can reset passwords directly in AD, and are still having problems, download and run dbgview (https://technet.microsoft.com/en-us/sysinternals/debugview.aspx) on the MIM portal server.

Ensure that the application is running with elevated administrative rights, and select "Capture Win32" and "Capture Global Win32"

[image]https://cloud.githubusercontent.com/assets/17229877/24064367/22190f22-0bb8-11e7-86ca-8769b8ecdccf.png

Once it is running, attempt a password reset operation. Save the resulting dbgview log file and attach it to this ticket.

Ryan

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/lithnet/resourcemanagement-ui-assistedpasswordreset/issues/4#issuecomment-287480741, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AZN6W3dZF117qig0Hn5ZIiQIcwsb8JNcks5rmwDPgaJpZM4MeWkz.

ryannewington commented 7 years ago

@alexvara can you confirm where that line was added to make it work? If needed, I can update the solution and fix this for everyone.