topic Re: For AD user password reset option in General Topics

For AD user password reset option

SurajN — Wed, 23 Jun 2021 16:09:05 GMT

We have seen that whenever a domain password is going to expire for the SSL VPN user, the Global Protect client on the user's system starts flashing a message that the password will expire soon. We want to know if there is any possibility to embed a password reset link as well along with such a message.

Please help us on the same so that we convey it to the end users.

There is any option in global protect for reset AD password.

Re: For AD user password reset option

S.Cantwell — Wed, 23 Jun 2021 16:19:26 GMT

Hello

Within the client config is this option

So I do believe it is possible to put in a link.

As far as a reset link.. the immediate answer is no..... but then, if you decide to implement with pre-login (which creates a VPN before a user even logs onto the computer) would allow a way to change the password. The computer would already be connected to the domain, and then the user can reset the password right on the login page of the Windows machine.

Re: For AD user password reset option

BPry — Thu, 24 Jun 2021 17:18:02 GMT

@SurajN,

Just to expand on @S.Cantwell's answer a bit, if you have a self-service portal you can utilize the custom message to provide a link to that resource to allow folks to change their password prior to it being expired.

If you want to allow a user to change an expired password utilizing GlobalProtect without having to setup a pre-login, you can actually do this directly through GlobalProtect. You need to be utilizing RADIUS authentication and setup PEAP-MSCHAPv2 as your auth protocol, but if setup properly it'll allow a user to actually change their AD password. You can view information on how to set that up HERE

Re: For AD user password reset option

B.Alimov — Wed, 07 Aug 2024 18:47:09 GMT

The link is dead for some reason.

Re: For AD user password reset option

kiwi — Wed, 21 Aug 2024 08:21:35 GMT

Hi @B.Alimov ,

So about that document ... yeah the link is dead because it's pointing towards an end-of-life version of the page. However, I think I can help you with that.

EOL guides are also posted in PDF format. Here is the 4.1 guide: https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/globalprotect/4-1/globalprotect-app-new-features/globalprotect-app-new-features.pdf

To get to the EOL Resources page: https://docs.paloaltonetworks.com/resources/eol

From here you can filter on product, version, etc...

Hope this helps,

-Kim.