My user base includes about 40 remote or mobile users with laptops, and after some recent changes, password resets are becoming a serious headache. All remote users have domain connected PCs, and their VPN connection also uses their AD credentials for the connection (this is the recent change, old VPN didn't use AD credentials). The VPN connection doesn't support password resets, so if a user's password expires, they cannot connect to reset their password and have the new password sync to AD, so they're stuck in a catch 22. Anyway, I've been trying to find a way around this problem, and have found a couple possible solutions that I'm hoping others have used and can comment on.
My main needs for these tools are the following:
- improved notification as a password nears expiration
- ability for user to change expired password while not connected to the VPN, thus allowing them to connect again
Netwrix' Password Manager and Synergix ADCE both look like they'd work for this purpose, but they aren't cheap and I'd like to get some feedback from current users of these tools. Do they work for you, and are they worth the costs?