We’re currently using SSO on AD domain XP clients with Notes clients, so every time AD GPO forces user to changed AD password it’s automatically changing note ID password, going further we have notes policy to change Internet password on notes ID password changed, to questions:1. at any time user forget AD password and call helpdesk for reset, helpdesk will do so but this is braking process and local notes ID password remains the same which obviously is unknown for user since he/she call helpdesk for reset in the first place, this means helpdesk have to recover notes ID password and reset it to same they reset AD password to, then place on and user local PC… then check in AD to force user to changed password on next logon which will make all 3 password in synch again… painful process. Is there any better way of doing this? Will AD Sync make this process easier? Can you use AD as LDAP server and do not use DD security, what is downsize of it?
-
Additionally is there any way to synch Internet password (DWA) with AD passwords for DWA users who do not use notes clients at all?
-
Finally, is there any way to change automatically password on ID file imported to mail file via DWA client any time Internet password changed?
TIA