TSP,AD and passwords changing

[mtkalec]

Callmanager is using MS ActiveDirectory as primary directory. We have a lot of users which are using Cisco TSP installed on their Windows based PC-s, primary for dialing from Outlook. Problem is that security policy forces users to change their passwords (in ActiveDirectory) every 3 months. After that, they should also change that password in TSP settings. Most of that users doesn't have administrator privileges so they cannot do that. Are there any solution for that problem, because it is a major problem of implementing TSP.

[vmoopeung]

TSP password on the client has to be changed, from the Active directory. You can't sync this process as of now.

[michaelco]

We currently have a similar problem with password management. Is there plans to allow synching of the password between the TSP and the CallManager?

Regards

Michael

[pcresswell]

As a workaround for this problem we created a dummy user in AD, associated it with all devices, set it's password not to expire and used that as the logon for the tsp on all of our desktops. When the dektop is given out the IT technician selects the correct line.

I'm sure that there are security implications for this approach, but we have bigger threats to worry about than a rougue user figuring out he can use outlook to trigger a phone call from somebody else's phone :-)

Peter