Every organization faces several common challenges in password management. With Self Service Reset Password Management IT administrators are now able to address these issues with ease. Some of the most common problems faced by IT departments in password management are listed below; Self Service Reset Password Management is the one solution for them all. 

Common Password Management Problems: 

• Frequent password reset requests to the helpdesk:
  • Use of highly qualified IT staff resetting user passwords
• Security risks:
  • Outside individuals requesting a password reset
  • Unenforced password strength requirements
• End-user downtime:
  • Loss of productivity while waiting for IT staff to reset passwords

Solution: Self Service Reset Password Management

With SSRPM there is less involvement of the IT staff and an increase in overall network security. IT staff members will also have more time to focus on higher level issues, maximizing their skill set, and elevating the professional image of the IT department.

How does it work?

The SSRPM User Client Software

Based on a GPO on an OU/domain, a small piece of software will need to be installed on each workstation in the corresponding OU/domain. This software communicates with the central SSRPM service to allow end-users to reset their passwords and adds an extra "Forgot my password" to the standard Windows logon dialog.

When the end-user logs on, the software will check with the central SSRPM Service to verify enrollment. If not enrolled, the end-user will automatically be asked to enroll. The administrator can allow end-users to skip the enrollment step. If the end-user hits the button “Forgot my password” and the end-user has enrolled, the software will retrieve the set of questions and answers from the central service and the end-user can start the process of resetting their password. The final password reset is performed by the central SSRPM Service.

After the reset, the end-user can log in immediately using the logon dialog
 

The central SSRPM service stores all security question answers in the SSRPM database (as an MD5 encrypted irreversible hash value) and processes the reset password requests. The service is installed during the installation process of Self Service Reset Password Management. For a successful installation, the service must have access to a Windows Domain Controller. The service is managed by the SSRPM Admin Console.
 

SSRPM Admin Console

The SSRPM Admin Console is operated by the sys admin and the helpdesk. It guides the sys admin through the installation of the central SSRPM service. The admin console also assists in the enrollment process and in monitoring service events (for instance: password resets or end-user enrollments) during normal operation through the SSRPM Dashboard and several overviews.