Change password not forcing new password on domain PC - azure

We enforce password reset policy for our Office 365 users every 90 days. I recently updated my password but my PC (joined to the domain) still is only using the old password. How do I make it use the new password, and why isn't it asking me for the new password?
(I'm connected to the internet, restarted machine, locked machine, Windows 10, etc.)

Run gpupdate /force.
Then logout and back on. If that did not update your password, use this PowerShell Script
$Expiration = (([datetime]::FromFileTime((Get-ADUser –Identity '**username**' -Properties "msDS-UserPasswordExpiryTimeComputed")."msDS-UserPasswordExpiryTimeComputed"))-(Get-Date)).Days
Write-Output $Expiration
See if this date is correct.
If it is correct from when you last reset it, then you may have a corrupted profile.

Related

RDP Issue! Prompting for username and password

We recently upgraded a PC from Windows 7 to Windows 10 (1909 18363.815). Internally if we RDP to the machine, we enter our domain username and password. We are then brought to the PC and once again prompted for a password. If it’s a new user to that PC, the user will have to select “Other User” and then enter their username and password again. We’ve tried everything here:
https://www.kapilarya.com/fix-need-to-sign-in-twice-on-windows-10-fall-creators-update
and here:
https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/troubleshoot/cannot-authenticate-or-must-authenticate-twice
and here:
https://www.tenforums.com/tutorials/92824-enable-always-prompt-password-upon-remote-desktop-connection.html#option1
Nothing seems to fix the issue. Its only happening on 2 out of 50 PC’s.

How can I reset the password of Jenkins?

I just noticed I cannot login in my Jenkins.
How can I reset my password and access to my account again? I do not see any link to recover passwords and they seem to be hashed in the installation directory.
In How to reset password of Jenkins you have a set of tricks to make this happen. I based my solution on it, but it diverges in a certain point.
This is what I did to solve the issue:
Let's assume Jenkins' directory is stored in $JENKINS (in my machine this is /var/lib/jenkins/) and your username is user.
Allow signups by disabling disableSignup. This means editing $JENKINS/config.xml and setting this option to false:
<disableSignup>false</disableSignup>
Restart Jenkins (service jenkins restart).
Enter in Jenkins and register a new user, for example testuser, with the password being the one you want to set to your user user.
Extract the hashed password from $JENKINS/users/testuser/config.xml. You will see something like:
<passwordHash>#jbcrypt:$2a$10$PY7p4dxFiGSgJpxiNVTQDuJKAQ8pr9snDgQXaafogjErvgB0oC3qy</passwordHash>
Set the user's password to this one in <passwordHash>. That is, edit $JENKINS/users/user/config.xml and replace the password there to set the one above.
Disallow signups back by enabling disableSignup. That is, in $JENKINS/config.xml set the disableSignup option back to true:
<disableSignup>true</disableSignup>
Restart Jenkins again.
Note you can also replace the password directly by generating a jBCrypt. For example, in http://www.mindrot.org/projects/jBCrypt/ you can find some Java code for it.
A different approach for Windows that solved this issue for me:
In
C:\Windows\System32\config\systemprofile\AppData\Local\Jenkins\.jenkins\config.xml, change useSecurity to false.
The restart Jenkins, you will now get full access without login. Go to People, select the old admin user and delete the user.
Then set
<disableSignup>false</disableSignup>
and
<useSecurity>true</useSecurity>
Restart Jenkins again, and you will now be able to register again.
Finally
<disableSignup>true</disableSignup>

how to ask for username and password on lan computer when a user opens a web browser first time

I have made database of 10 users and password. Now I want to prompt a dialog box on lan computer in which they have to enter username and password given by me whenever they open browser every time for accessing internet.
How can I do so?
I have also installed a squid proxy.
Maybe this will help: http://wiki.squid-cache.org/ConfigExamples/Authenticate/Mysql (assuming you have a MySQL database).
You can use just basic username and password authentication. Since you are only talking about 10 users.
https://nodevine.com/library/messing-with-http-headers-in-squid-2-6-and-3-0-for-high-anonymity-in-centos-and-ubuntu

Windows Authentication prompt username field autopopulates and cannot be changed

I have a website that uses Windows Authentication to authenticate its users. Normally when a user accesses the site on an IE browser the username field is populated with the computers domain name and user name. This is usually incorrect and the user enters the correct username and their password and can access the site.
I have a user now on Windows 7 IE8(I beleive) and the username field in the credential prompt is being autopopulated with domain\userName except the username is incorrect and we cannot change it. The user is unable to log into the site because of this. Has anyone experienced this before? Does anyone know why the username field cannot be changed? Solutions I have tried:
Clearing cache and stored form data/passwords etc
Site is in users trusted sites. So I had the user change the settings to "Prompt for username and password" but the prompt still comes up with the username autopopulated and does not let her change it.
I have never run into this before. Our users do not have any issue logging in, its just this one corporate location that was just set up and is running Windows 7(Rest of the company is under Windows XP) If it matters this is a sharepoint 2010 web application
Any help on this would be greatly appreciated as I have an entire group of users with this problem. Im willing to bet this would not be an issue in a different browser but they need to be able to use IE for application compatibility reasons.
Thanks!
I was able to fix it by doing the following:
Go to Start, Control Panel, User Accounts, then click Manage Your Credentials, and look for the credentials to your site, if they are there Modify and “Remove from vault” ( I suppose you could Edit them to the correct credentials but I just removed it and it did not prompt her).
She had the wrong credentials stored there. Im not sure why clearing the cache and passwords from the internet options didnt work but this did.
I had this problem with a user where the domain stored with the credentials could not be changed. This is the only item online I could find even close to my problem. The user saw "user-pcdomain\localusername" auto entered in the form. He tried to correct it with "workdomain\workusername" but got a message saying "Please enter a user name and password". Eventually we realized that his system was sending "user-pcdomain\workdomain" as his username. I've never seen a login misfire like that.
In his case he did not have his credentials stored but needed to add credentials - "workdomain\workusername" - for all of the domains he needed to access.
The point is - to expand on the answer - that IE or Windows 7 or both will store credentials incorrectly on rare occasions and the solution is be creative about adding\editing\remove credentials with Manage Your Credentials

Drupal 6 how to prevent automatic password recovery and reset for a specific user

I have an client website with a special user name 'guest' that allows unauthorized users to login and register for events. But lately the password has been getting changed and it appears that it is being done at the login by requesting a password recovery/reset. That reset is done automatically and although it emails the temporary password to the ~manager~ of the guest account, it requires repeated resetting of the password back to its original and known value.
So, is is possible to prevent a password recovery/reset only when the user name is 'guest', specifically? Thus not affecting other authorized users from getting a reset when they have forgotten their password?
FYI: the last post I saw on this on drupal was 2005 ... nothing since, and it was a node/16909. In that post a patch was offered, but it was applicable to Drupal version 5, and one of the comments was by Dries where he said that patch would not be folded into a release until a better solution was found. I'm on Drupal 6.
Any solutions???
carl
Why not just do away with the guest account and use the systems built in anonymous user? Fighting Drupal always ends in tears.

Resources