Monday, December 17, 2012

Third Party Active Directory Password Management Web Parts for SharePoint 2010


As part of a project that I am currently working on, we need to allow users to manage their own Active Directory passwords on a SharePoint 2010 extranet. Ideally, the users will be able to change their password, reset their password (e.g. in case it is forgotten or expires), and be alerted as to when their password will expire.

After much Googling, I limited the options of possible Active Directory password management web parts for use with SharePoint 2010 to six. They all require licensing and generally break out the functionality into separate web parts. Below are my notes with little editorial. I'll eventually update this post with what I chose and why.

1.     Bamboo Solutions
i.            Password Change
a.   "Give your internal and external SharePoint users the power to change their SharePoint account passwords through SharePoint. No need to build a separate Web application to complete a simple, but essential security task. With the Bamboo Password Change Web Part, users can change their password on-demand and still comply with the defined password policy."
b.   Cost: $795 per server license; 30-Day Trial
c.    Comments: Probably the nicest looking of the bunch with a password strength indicator.

ii.           Password Reset
a.   "With the importance of login security growing and password requirements increasing, it is becoming easier for users to forget their passwords. With the Password Reset Web Part, users now have the ability to submit their own password reset requests through SharePoint, no longer requiring IT administration assistance. With two types of ID verification available, users can reset their password by email confirmation or by answering predefined security questions (Active Directory accounts only)."
b.   Cost: $795 per server license; 30-Day Trial

iii.          Password Expiration
a.   "Are you enforcing expiration of Active Directory Service account passwords, and as a result, your external users are having difficulty logging in to SharePoint due to expired passwords? Dramatically cut down on the overhead costs of troubleshooting login issues with the Password Expiration Web Part. The Password Expiration Web Part provides an early warning system for SharePoint users when their password is about to expire."
b.   Cost: $795 per server license; 30-Day Trial

2.     SharePointBoost
i.            Password Change and Expiration
a.   "Passwords management can represent a big deal of time and energy for Administrators. This password changing web part delegates most of the work to Users and takes in charge all notifications and confirmations. In this way Administrators can organize their work well in advance and simply monitor the process, thus being available for more rewarding tasks without compromising security."
b.   Cost: $599 per server (Farm and Site Collection licenses also available); 30-Day Trial

ii.           SharePoint Password Reset
a.   "A simple web part that lets users reset their password right on their SharePoint page without having to ask the administrator or IT for assistance. New password will be sent online or through email delivery."
b.   Cost: $599 per server (Farm and Site Collection licenses also available) ; 30-Day Trial
c.    Comments: Purchase together for $899.

3.     Virto Software
i.            Virto Password Change Web Part for Microsoft®SharePoint 2007 and 2010 
a.   "Virto Password Changer Web Part for SharePoint 2007 & 2010 enables Active Directory (AD) users and users with general accounts (FBAP) to change themselves their passwords when they are logged onto SharePoint Site."
b.   Cost: $295 commercial license per WFE server; development license $149; 30-Day Trial

ii.           Virto AD Password Reset and Recovery Web Part for Microsoft® SharePoint 2007 and 2010
a.   "Virto Password Reset & Recovery Web Part for Microsoft SharePoint 2007 and 2010 allows any user logged in to the SharePoint portal using Active Directory authentication to reset his password without contacting administrator. New temporary password will be shown online or sent to email box according to the web part configuration."
b.   Cost: $390 commercial license per WFE server; development license $149; 30-Day Trial

4.     HarePoint
i.            HarePoint Password Change for Microsoft SharePoint
a.   "HarePoint Password Change for Microsoft SharePoint 2007 / 2010 allows end-users to change their own password in a SharePoint site and notifies users when their password is about to expire. Simply add the web part to your SharePoint intranet or extranet portal and let authorized users easily manage their own passwords."
b.   Cost $649 per server; Per user license also available $1.70/user; 30-Day Trial
c.    Comments: There doesn’t seem to be a product for resetting passwords if expired or forgotten.

5.     ArtfulBits
i.            Password Change Web Part Version 1.0
a.   "ArtfulBits Password Change Web Part allows users to change their own passwords from within the SharePoint environment using standard text box interface (current password, new password and confirm new password). It supports Windows authentication and Forms-based which includes Active Directory (AD), Lightweight Directory Access Protocol (LDAP), SQL and other authentication providers."
b.   Cost: $200 per server; 30-Day Trial

ii.           Password Expiration Web Part Version 1.01
a.   "ArtfulBits Password Expiration Web Part enables notification of Active Directory users through the Web Part user interface along with a link to a web page to change their password and/or an email that is automatically sent to their inbox notifying the user that their password is about to expire within a specified grace period. Administrators also have an option to force the users to be automatically redirected to selected web page in order to change their passwords."
b.   Cost: $300 per server; 30-Day Trial

iii.          Password Reset Web Part Version 1.01
a.   "ArtfulBits Password Reset Web Part allows users to reset their forgotten passwords from within the SharePoint environment without administrator intervention. If user does not remember his password and wants to log in SharePoint site, he can reset his forgotten password via web part interface, passing through the various degrees of protection, included security questions and / or email confirmation. New password can be shown on page, or sent to user email, or even user can type new password manually."
b.   Cost: $200 per server; 30-Day Trial

 6.     The Dot Not Factory
i.            AD Password
a.   "AD Password is the only solution allowing end-users to reset forgotten Active Directory and AD LDS (ADAM) passwords and unlock their locked-out accounts while seamlessly integrating into your existing environment. AD Password offers multiple interfaces allowing users to change their passwords or enroll in the Password Reset Service from Microsoft SharePoint, a standard web interface and the Windows logon dialog. AD Password is a flexible solution that eliminates the source of the number one help desk call -- password resets."
b.   Cost: per user commercial license only starting with 50 users for $350; 15-Day Trial
c.   Not limited to just SharePoint 

If Password Change is the only functionality that you require, the following are two are free options:
o   "This web part enables users to change their local or Active Directory password from within a SharePoint Site Collection. It is designed for Windows SharePoint Services v3 and the Microsoft Office SharePoint Server 2007 as well."
o   Cost: Free
o   Comments: Apparently this can be successfully installed on SP2010 and is documented here: Add Change Password Web Part to SCSM 2012 Self Service Portal (SharePoint 2010)

·       SDS SharePoint Library
o   Active Directory Password Change
·       "Have remote users? Tired of logging into Outlook Web Access for password changes? This web part allows users to change their passwords."
·       Cost: Free; must compile

Finally, if you prefer, you can build it yourself. Here’s a blog entry by a Share Point Consultant and Architect based out of Chennai, India to get you started: ChangePassword Web Part for SharePoint 2010.

5 comments:

  1. Thank you for mentioning of our product!

    We just released new version of HarePoint Password Change with SharePoint 2013 support:
    http://www.harepoint.com/Products/HarePointPasswordChange/Default.aspx

    ReplyDelete
  2. Just one remark about ArtfulBits licensing - its not "per server". ArtfulBits licensing is "per Farm" and the number of WFE servers is not limited!
    http://www.artfulbits.com/products/bundles/password-management-pack.aspx

    ReplyDelete
  3. This is such a great resource that you are providing and you give it away for free. I love seeing blog that understand the value of providing a quality resource for free.
    jiofi 2 settings

    ReplyDelete
  4. It's not my very first time to visit this blog; I’m visiting this daily and acquire superb info from here day by day. password management

    ReplyDelete
  5. Hello there, I must confess that I have browsed many of your posts. And this particular post is probably where I got the most useful stuff for my research. Thanks for posting this amazing piece, hope we can see more on this. Are you aware of any other websites on this subject? JioFiLocalHtml

    ReplyDelete