How to Have Users Change Their Own PCA (AD) Password

[Kevin Love]

We just deployed a VM-only Unity server - 4.0(4). Does anybody know if there's a way to have all users change the password that they use to access PCA? At this point, everybody has the same default password to PCA - a gaping security hole.

I know that I can manually change each user's AD password, but there are almost 2,000 users and going this route would take forever (plus, I would know all of their passwords). Setting the "User much change password at next logon" isn't practical, as we only use Exchange for VM, Exchange is on-box and users don't log in to this box.

I have a sinking feeling that I'm SOL on this one, but I'm hoping that somebody can prove me wrong.

Thanks!

Kevin

[kechambe]

I was working with a large customer about a month ago and I believe they did this to get it working:

http://support.microsoft.com/?id=269082

I totally feel you on the 'this is not practical' statement. I brought it up with development that subscribers need to have the option to authenticate with their extension/PIN since username/password isn't very logical for VM only installations that are not integrated in an existing directory.

If you had the choice would extension/PIN be the way you wanted to do it?

Let me know if you can't get that setup and I will give it a shot in the lab.

Thanks,

Keith

[Kevin Love]

Thanks a bunch, Keith! We'll give this a try.

[Kevin Love]

Oh, BTW, I forgot to answer your question. Yes, by all means, extension/PIN would make the most sense. Voicemail only configurations like this are obviously the exception - most of the time the user can just change their domain password. But this is a huge problem!

Thanks, again.

[latorre]

Keith, do you have an update on this issue? Is there perhaps an ES or other patch available to allow PCA users to log in with extension/PIN or at least the option to expose password change options within PCA?

Thanks for any updated info!

[eschulz]

I found this in the online help page for PCA...

* You cannot change your Cisco PCA password by phone or from the Cisco Unity Assistant. To change it, you must do so in Windows. (Press Ctrl-Alt-Delete, and then click Change Password. If the Cisco Unity server is in a different domain than the one that you typically access with your Windows password, specify the domain name for the Cisco Unity server in the Change Password dialog box.)