Password Reset Tool - To allow admin and staff to manage resetting their password.

[Clements]

We have been looking into 3rd party companies that allow teachers/staff to be able to reset passwords without contacting our helpdesk.  We want to limited this so students can't not change passwords.  Some companies we know about are:  ( Azure SSPR, ManageEngine, N-Able, Netwrix, Dovestones)

We are looking for something cost effective, simple to deploy, secure, and simple for end-users.  If anyone has suggestions we would love to hear about them. 

Thank you in advance.  

[ddunlap]

Would this be for resetting passwords in Google or resetting in AD then the changes filter up to Google?  If AD, PWM is a good option as it's free - https://opensource.com/article/19/4/automate-password-resets-pwm.  We've been involved with this in NC schools.  Obviously there is no paid support...

[kaned]

We wrote our own years ago and found it underused and ultimately abandoned it.  If you have some software/php expertise, it wasn't hard to make a page, query group membership (to see who is a teacher or not) and reset password based on that.  We ran this on a LAMP stack on a server 2008 at the time.  It would essentially call a AD password reset CLI command if all the checks succeeded.

I have moved from many of our home-grown solutions to vetted solutions.  In this case, we didn't use it enough to replace it!

@ddunlap 's solution is not a bad one, we played with it but was more of a self-serve solution.  We were unsure if that would stick as a long term solution.

[ddunlap]

The PWM software is based on the commercial NetIQ SSPR:

www.netiq.com/products/self-service-password-reset

and one can enable single modules such as 'help-desk'.

[Kim_Nilsson]

Are you sure it isn't the other way around? 🙂