Upload
others
View
18
Download
0
Embed Size (px)
Citation preview
Virto Password Reset and Recovery Web Part for SharePoint
Release 3.1.1
Installation and User Guide
2
Copyright©2016Allrightsreserved.www.virtosoftware.com
TableofContents
OVERVIEW.................................................................................................................................................................................3
SYSTEMREQUIREMENTS...........................................................................................................................................................4
OPERATINGSYSTEM...............................................................................................................................................................................4SERVER.................................................................................................................................................................................................4BROWSER.............................................................................................................................................................................................4
INSTALLATION............................................................................................................................................................................4
INSTALLINGVIRTOSHAREPOINTPASSWORDRESETANDRECOVERYWEBPARTFORSHAREPOINT..................................................................4LICENSEACTIVATION..............................................................................................................................................................................7UPGRADINGVIRTOSHAREPOINTPASSWORDRESETANDRECOVERYWEBPART............................................................................................7UNINSTALLINGVIRTOSHAREPOINTPASSWORDRESETANDRECOVERYWEBPART........................................................................................8
USECASES..................................................................................................................................................................................8
RESETTINGPASSWORDFROMASITEWITHANONYMOUSACCESS................................................................................................................8USINGSECURITYQUESTIONSFORPASSWORDRESETTING.........................................................................................................................14
ADMINISTRATIONANDUSAGE...............................................................................................................................................18
ADDINGTHEWEBPARTTOAPAGE.......................................................................................................................................................18VIRTOPASSWORDRESETANDRECOVERYADMINISTRATION.....................................................................................................................19
ActiveDirectoryAuthentication...............................................................................................................................................19FormBasedAuthentication......................................................................................................................................................20SecurityQuestions......................................................................................................................................................................21EmailRequest.............................................................................................................................................................................23
VIRTOPASSWORDRESETUSAGE...........................................................................................................................................................25SecurityQuestion.......................................................................................................................................................................25EmailRequest.............................................................................................................................................................................26
VERSIONRELEASEHISTORY.....................................................................................................................................................27
3
Copyright©2016Allrightsreserved.www.virtosoftware.com
VirtoPasswordResetandRecovery3.1.1forSharePoint
OverviewThiswebpartisusedforquickandsimpleresolvingofsituationswhenauserforgetshispasswordorthepassword isexpiredaccordingtopasswordsecuritypolicy. If there isnosuchatool,usermustcontacthisADadministratoreverytimeheneedstochangethepassword.Virto SharePoint Password Reset and Recovery Web Part is added to the SharePoint byadministratorwhoadjuststhecomponent.Youcanfinddetailed informationaboutthewebpartadjustmentinInstallationandUserGuide. BesidestheabilitytoaddWebParttotheSharePointsitepage,administratorcanalsoaddittoanypageofotherweb-portalwiththehelpofadditionalASP.NETsourcecodesuppliedwiththecomponent.AnyuserauthorizedontheSharePointsitewithADlogin(includingcasesofremoteaccesstotheportal)canrequestaconfigurationofnewpassword.Andthisdoesnotmeanthathecanchangetheconfigurationofthewebpart.TherealsocanbeasituationwhenusercannotbeauthorizedontheSharePointsite,butneedstoenter it. For such cases the web part can be installed on a special WSS SharePoint site withanonymous access. Thiswill help userswithout ability to logon to SharePoint site to reset theirpassword.Therearetwowaysofworkingwithpasswords–requestanewpasswordonthesiteonlineorbyemail. According to security policy in the first case before the password changing, user will beoffered to answer some security questions (from one to three). Security questions are set bysystemadministratorandthevaluesaretakenfromcorrespondingfieldsofADprofile(forinstance,dateofbirth,mobilephoneandetc.).FormBasedauthenticationisincludedintothelistoffeaturesofVirtoSharePointPasswordResetandRecoveryWebPart.
4
Copyright©2016Allrightsreserved.www.virtosoftware.com
SystemRequirementsOperatingSystemMicrosoftWindowsServer2003,2008,2012ServerSharePointRelease2013:-MicrosoftWindowsSharePointFoundation2013orMicrosoftOfficeSharePointServer2013;-Microsoft.NETFramework4.5;SharePointRelease2010:-MicrosoftWindowsSharePointFoundation2010orMicrosoftOfficeSharePointServer2010;-Microsoft.NETFramework3.5;SharePointRelease3:-MicrosoftWindowsSharePointServicesv3orMicrosoftOfficeSharePointServer2007;-Microsoft.NETFramework3.5;Note:ThisproductisnotcompatiblewithSPS2003andWSSv2.BrowserMicrosoftInternetExplorer7orhigher.
InstallationThissectiondescribeshowtoinstall,upgrade,uninstall,orcontactSupportfortheVirtoSharePointPasswordResetandRecoveryWebPart.InstallingVirtoSharePointPasswordResetandRecoveryWebPartforSharePoint Beforeyoubegin,youneedtomakesureyouhaveaccesstotheserverandyouraccounthastheappropriateadministrativeprivilegestoinstallapplications.The Virto SharePoint Password Reset and Recovery setup program provides links to the variousinstallationcomponentsforthePasswordReset.To access the Virto SharePoint Password Reset and Recovery Setup program downloadVirto.SharePoint.20XX.PasswordResetWebPart.zip file and unzip it. OpenVirto.SharePoint.20XX.PasswordResetWebPartfolderandrunextractedSetup.exefile.
5
Copyright©2016Allrightsreserved.www.virtosoftware.com
Thesetupwizardwindowwillappear.
Virto SharePoint Password Reset and Recovery setupwizard performs a system check prior to theinstallation. All the system checks must be completed successfully in order to proceed with theinstallation.Afterthecheckshavecompleted,click“Next”.
6
Copyright©2016Allrightsreserved.www.virtosoftware.com
Selectthewebapplication(s)whereyouwanttoinstalltheproduct.
Warning:YoumustbeloggedintotheSharePointserverwithaSiteCollectionAdministratoraccounttoautomaticallyactivatethisfeature.
7
Copyright©2016Allrightsreserved.www.virtosoftware.com
Thenclick“Next”.
Click“Close”.Theinstallationcompleted.Note:installationprocedureissimilarforSharePoint2007,2010and2013versions.LicenseActivationToseefullinstructionforsuccessfulactivationofyourcomponent,pleasereadourblog.
UpgradingVirtoSharePointPasswordResetandRecoverywebpartIfyoualreadyuseVirtoSharePointPasswordResetandRecoverywebpartandneedtoupgradeittothelatestversion,downloadthe.zipfilefromhttp://www.virtosoftware.com.Unzipthefileandrunsetup.exeasitisdescribedintheInstallingVirtoSharePointPasswordResetandRecoverysection.Note:itishighlyrecommendedtoexitLicenseManagerbeforeupgrading.IfyouneedtouseLicenseManager,runitafterupgrading.Onthestep3checkthebox“Upgrade”andclick“Next”.Note:ifyouhadactivatedthelicensewhileinstallingthepreviousVirtoSharePointPasswordResetandRecoverywebpartversion,youdonotneedtoactivateitnow.
8
Copyright©2016Allrightsreserved.www.virtosoftware.com
UninstallingVirtoSharePointPasswordResetandRecoverywebpartTouninstalltheWebPart:
1. Double click the Setup.exe extracted from downloadedVirto.SharePoint.20XX.PasswordResetWebPart.zipfile.
2. The program performs the system checks again. Once that has successfully completed, theprogrampromptsyoutoRepairorRemovethesolution.SelectRemove,andclick“Next”.
UseCasesResettingPasswordfromaSitewithAnonymousAccessSituation:SharePointsiteusesWindowsAuthenticationandusers’profilesarestoredinActiveDirectory.AusertriestologontoSharePointsiteofhiscompanybuthehasforgottenthepassword.Heneedstochangehispasswordandenterthesite.Solution:ThisusercannotlogontoSharePointsite.ButhecannavigatetoSharePointWSSsitewithanonymousaccess (created by SharePoint administrator before) and use Virto SharePoint Password Reset andRecoverywebpartinstalledonit.AsaresultuserreceiveshispasswordforaccesstoSharePointsite.
9
Copyright©2016Allrightsreserved.www.virtosoftware.com
Howtoimplement:ToimplementthesolutionandmakeitpossibleforSharePointuserstoresettheirpasswordwhentheycannotlogontoSharePointsite,thefollowingactionsmustbedone:
1. SharePointWSSsitewithanonymousaccessshouldbecreated.2. VirtoSharePointPasswordResetandRecoverywebpartshouldbeinstalledonWSSsite.3. SharePointusersmustbe informedabout this siteexistenceorautomatic redirect forwrong
passwordcasescanbeadjusted.4. VirtoSharePointPasswordResetandRecoverywebpartmustbeadjusted(securityquestionor
emailoption,seeVirtoPasswordResetAdministrationsection).
DetailedInstruction:
1) GotoCentralAdministrationsite(“ApplicationManagement”->“ManageWebApplication”)
2) Choose“Webapplication”fromthelist.Click“AuthenticationProviders”ontheribbon.
10
Copyright©2016Allrightsreserved.www.virtosoftware.com
3) Chooseaproviderfromthelist.
4) Checkthebox“Enableanonymousaccess”forrequiredWebApplication.
11
Copyright©2016Allrightsreserved.www.virtosoftware.com
NowtheabilitytoselectanonymousaccesstositesisaddedtotheWebApplication.
5) Goto“Sitecontents”in“SiteAdministration”sectionandcreateaNewsite.
12
Copyright©2016Allrightsreserved.www.virtosoftware.com
6) Enteryoursitename.Select“BlankSite”templateandcheck“Useuniquepermissions”inthe
“Permissions”group.Click“Create”.
7) Nowgotothecreatedsite->Sitesettings.Click“Sitepermissions”in“UsersandPermissions”section.
13
Copyright©2016Allrightsreserved.www.virtosoftware.com
8) Goto“Settings”->“AnonymousAccess”.Checkthebox“EntireWebsite”foranonymousaccesssettings.
NowPasswordResetsitecanbeaccessedwithanonymousauthentication.
9) ThenaddVirtoResetandRecoveryWebParttothefirstpageofthissite(seeVirtoPasswordResetAdministrationsection)andconfigureit.Nowusercangetanonymousaccesstothispageandresethispassword.
14
Copyright©2016Allrightsreserved.www.virtosoftware.com
UsingSecurityQuestionsforPasswordResettingSituation:Userforgetsthepassword.Howtoresetthepasswordwithananswertoasecurityquestion?Howthisanswerisdefined?Solution:Userdefinesananswertoasecurityquestionwhenhefillsoutaspecial field. Informationfromthisfieldwillbeverifiedandiftheansweriscorrect,passwordwillbereset.Howtoimplement:TwowebpartsareinstalledonaSharePointsite–VirtoActiveDirectorySelfUserServiceandVirtoPasswordResetandRecoveryWebPart.Thefirstwebpartallowsusertosetananswertoasecurityquestion(valueofthespecialfield),thesecondwebpartenablestoresetthepasswordwhenuserforgetsit.Thefollowingactionsmustbedone:1. VirtoActiveDirectorySelfUserServiceinstalling.2. Addingspecialfieldwhichwillcontainanswertoasecurityquestion.3. VirtoPasswordResetandRecoveryWebPartinstalling.4. Selectingfield(createdin3)inthePasswordResetandRecoveryWebPartsettingsforsecurity
questionanswer.
DetailedInstruction:ForSharePointsiteadministratorInstallVirtoActiveDirectoryUserService.Thengoto“SiteActions–SiteSettings”.Followthelink“VirtoActiveDirectoryServiceSettings”.
15
Copyright©2016Allrightsreserved.www.virtosoftware.com
Click“ManageFields”anduse“AddField”toaddnewfieldtothelist.
Enter required data and pay attention to the field “AD Name” (corresponding field from ActiveDirectory).
16
Copyright©2016Allrightsreserved.www.virtosoftware.com
Click“OK”.
ThefieldwillappearintheActiveDirectorySelfUserServiceWebPart.
GotothesitewhereVirtoPasswordResetandRecoveryWebPartisinstalled.Use“EditWebPart”.Adjust web part for security question (see User Guide). Define the field (created with the ActiveDirectoryUserService)asafieldwithananswertosecurityquestion.
17
Copyright©2016Allrightsreserved.www.virtosoftware.com
Click“OK”.ForuserGo to SharePoint sitewhere the ActiveDirectoryUser Service is installed. Fill out the field “SecureAnswer(Pet’sName)”.Click“Save”.
WhenuserforgetshispasswordGotothesitewithanonymousaccess(contactyouradministrator).
Enteranswertothesecurityquestion.Click“Submit”.Iftheanswerisincorrect,amessagewillappear.
18
Copyright©2016Allrightsreserved.www.virtosoftware.com
Whentheansweriscorrect,passwordwillbedisplayedandsentbye-mail.
AdministrationandUsage
AddingtheWebParttoaPage
GotoSharePointsitewhereyouwanttoaddthewebpartandopen“SiteActions-Editpage”.
Youwillswitchtoeditmode.Click“AddaWebPart”.
SelectVirtoPasswordResetandRecoveryWebPartforSharePointatthebottomofthelistandclick“Add”.Onceyouhaveclicked“Add”button,use“Exiteditmode”button.
19
Copyright©2016Allrightsreserved.www.virtosoftware.com
VirtoPasswordResetandRecoveryAdministrationOnceyouhaveaddedVirtoPasswordResetandRecoverywebparttothesitepage,youhavetoadjustit.Use“EditWebPart”intheupperrighthandcornerofthepage.TheWeb Part settings will be displayed. SharePoint administrator adjusts the system according topasswordsecuritypolicy.ActiveDirectoryAuthentication
Check thebox“Showpassword touser” ifyouwant toshowpasswordon thesitepagewhenuserresetsit.Ifyoudefinepagepublicurl,externaluserswillbeabletoresetpasswordandreceiveanewonewithusingthispubliсurl.ActiveDirectoryauthenticationenablesusers toenter thesame loginandpassword to logonto theSharePointsiteasforloggingtoWindowssystem.InthiscaseautomaticSharePointauthenticationcanbeadjusted.There are two options for password reset: security questions and email request. See the sectionsbelow.
20
Copyright©2016Allrightsreserved.www.virtosoftware.com
FormBasedAuthenticationTouseformbasedauthentication(passwordisdefinedspeciallyforloggingtoSharePointsite),selectitinthe“PasswordRestConfiguration”block.
Formbasedauthenticationallowsonlyonetypeofpasswordreset–“Usingemailaddress”.Thismeansthatpasswordwillbesentbyemailaccordingtothesystemsettings.Securityquestionoptionwillbedisabled.Checkthebox“Tosendconfirmingmessagebye-mail”,anduserwillreceiveemailwithlinktofollowbeforepasswordisreset.Ifyouuncheckthisbox,thepasswordwillbesentbyemailimmediatelywithnoadditionallinkstofollow.
NowdefineEmailoptionsforpasswordreset.
21
Copyright©2016Allrightsreserved.www.virtosoftware.com
Typethesubjectandmessagetexttobedisplayedinthesystememailmessage.Ifyoucheckedthebox“Tosendconfirmingmessagebye-mail”,typethetextofconfirmingemailmessage.Nowclick“OK”tosavethesettingsandreturntothewebpart.Orclick“Apply”tosavethesettingsandcontinueadjustment(inthiscasethesettingsblockwillstayopened).SecurityQuestionsIncasesecurityquestionsareselected,userwhotriestoresetthepasswordwillhavetoanswersomequestions. And if theweb part identifies this user’s answers as correct ones, the passwordwill bechangedonline.Ifyouwanttousethisoptionforpasswordreset,select“Usesecurityquestions”.
Thendefineadministrativeoptions:enterdomainname,userprincipalnameandpassword.Thisdataisappliedforuserwhowillhaverightsforpasswordreset(webpartadministrator).
In this field you can apply a passwordpolicyto users formanorganizational unit and allow chosengroupstoresetpasswords.
22
Copyright©2016Allrightsreserved.www.virtosoftware.com
Thencheckrequiredboxes:
1) UnlockAccountAutomatically–systemcanunlocklockeduser(accordingtosecuritysettings);2) Enable Account Automatically – disabled account can be enabled again for authentication
(accordingtosecuritysettings);3) Usermust change password at next logon– userwill have to change newpassword again
whenloggingtothesystemnexttime;4) CheckforvaliduserE-mail–thesystemwillcheckiftheenteredemailaddressisthesameas
emailaddressdefinedforActiveDirectory.
Now define security questions (from 1 to 3) and point corresponding Active Directory fields thatcontainanswerinformation.Thesystemwilldefineifuser’sanswersmatchthevaluesofcorrespondingActiveDirectoryfields.
23
Copyright©2016Allrightsreserved.www.virtosoftware.com
Nowclick“OK”tosavethesettingsandreturntothewebpart.Orclick“Apply”tosavethesettingsandcontinueadjustment(inthiscasethesettingsblockwillstayopened).EmailRequestIncase“Usee-mailaddress”option isselected, thepasswordwillbesentbyemailaccordingtothesystemsettings.
Ifyoucheckthebox“Tosendconfirmingmessagebye-mail”,userwillreceiveemailwithlinktofollowbefore password is reset. If you uncheck this box, the password will be displayed on the pageimmediatelyandsentbyemailwithnoadditionallinkstofollow.Thendefineadministrativeoptions:enterdomainname,userprincipalnameandpassword.Thisdataisappliedforuserwhowillhaverightsforpasswordreset(webpartadministrator).
24
Copyright©2016Allrightsreserved.www.virtosoftware.com
Note:youneedtoenterfullyqualifiedprincipalname(seetheexampleonthescreenshot).
NowdefineEmailoptionsforpasswordreset.
Typethesubjectandmessagetexttobedisplayedinthesystememailmessage.Ifyoucheckthebox“Tosendconfirmingmessagebye-mail”,typethetextofconfirmingemailmessage.Nowclick“OK”tosavethesettingsandreturntothewebpart.Orclick“Apply”tosavethesettingsandcontinueadjustment(inthiscasethesettingsblockwillstayopened).PasswordFormatAdministratorcandefinetheformatofpasswordwhichwillberequiredwhenpasswordresetting.Bydefaultnewpasswordmustcontainletters,digitsandspecificsigns.Incaseyouneedtochangethesesettings,gotowebpartsettings(“EditWebPart”)androlldownto“Passwordproperties”block.Checktherequiredboxes:
• Includeletterstopassword;• Includedigitstopassword;• Includespecificsignstopassword.
Whenalltherequiredboxesarechecked,click“OK”or“Apply”tosavethesettings.
25
Copyright©2016Allrightsreserved.www.virtosoftware.com
VirtoPasswordResetUsageWhenVirtopasswordResetandRecoverywebpartisaddedtothepageofSharePointsiteitlookasfollows(dependingonwebpartconfiguration).
Userhastofillouttherequiredfields(pointedwith*)andclick“Submit”.Thenthepasswordwillbeshown(sent)touserdependingonwebpartconfiguration(seeprevioussection).SecurityQuestionIf thewebpartoffersyoutoanswersomesecurityquestions, typetheanswer inthecorrespondingfieldandclick“Submit”.
Iftheenteredinformationiscorrect,thepasswordwillbedisplayed.
26
Copyright©2016Allrightsreserved.www.virtosoftware.com
EmailRequestIfthewebpartoffersyoutoenteremailaddress,theemailsendingisselectedforpasswordreset.Inthiscasetwopossibleoptionscanwork:
1) Thewebpartallowsenteringanyemail.Passwordwillbesenttothisemailafterthecheck.2) Thewebpartallowsenteringonlytheemaildefinedforuser inActiveDirectory. If theemail
addressisincorrect,thepasswordwillnotbesent.
Fillouttherequiredfieldsandclick“Submit”.
If the entered information is correct, the password will be sent to the pointed email address (orconfirmingemailmessageatfirst).
27
Copyright©2016Allrightsreserved.www.virtosoftware.com
VersionReleaseHistoryReleaseDate Version Description
04/15/2016 v.3.1.1 [+]OptionforlimitingusersfromspecifiedOrganizationalUnitstoresetpasswordhasbeenadded.
09/09/2013 v.3.0.0 [*]Newlicensemanager09/20/2011 v.2.0.0 [+]ResettingpasswordforFBAusershasbeenadded.06/25/2010 v.1.3.0 [+]Abilitytochangewebpartlocalizationhasbeenadded.
[+]Frenchlocalizationhasbeenadded.[+]Optionforhidingpasswordonpagehasbeenadded.[+]Optionforpublicwebpartpageurlhasbeenadded.
02/04/2009 v.1.2.0 [+]Passwordcomplexitysettingareadded11/13/2009 v.1.1.0 [*]Userinterfaces
[-]SomefixesforErrorMessageSystem
09/29/2009 v.1.0.0
FirstRelease
[-]bugfixed[+]newfeaturesadded