IISADMPWD Virtual Directory Is Not Created During a Default Install of IIS 6.0

Author:

Erik Szewczyk MVP

COMMUNITY SOLUTIONS CONTENT DISCLAIMER

MICROSOFT CORPORATION AND/OR ITS RESPECTIVE SUPPLIERS MAKE NO REPRESENTATIONS ABOUT THE SUITABILITY, RELIABILITY, OR ACCURACY OF THE INFORMATION AND RELATED GRAPHICS CONTAINED HEREIN. ALL SUCH INFORMATION AND RELATED GRAPHICS ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT AND/OR ITS RESPECTIVE SUPPLIERS HEREBY DISCLAIM ALL WARRANTIES AND CONDITIONS WITH REGARD TO THIS INFORMATION AND RELATED GRAPHICS, INCLUDING ALL IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, WORKMANLIKE EFFORT, TITLE AND NON-INFRINGEMENT. YOU SPECIFICALLY AGREE THAT IN NO EVENT SHALL MICROSOFT AND/OR ITS SUPPLIERS BE LIABLE FOR ANY DIRECT, INDIRECT, PUNITIVE, INCIDENTAL, SPECIAL, CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF USE, DATA OR PROFITS, ARISING OUT OF OR IN ANY WAY CONNECTED WITH THE USE OF OR INABILITY TO USE THE INFORMATION AND RELATED GRAPHICS CONTAINED HEREIN, WHETHER BASED ON CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY OR OTHERWISE, EVEN IF MICROSOFT OR ANY OF ITS SUPPLIERS HAS BEEN ADVISED OF THE POSSIBILITY OF DAMAGES.

SUMMARY

The IISADMPWD virtual directory allows users to change their account passwords remotely through IIS by means of ASP scripts. IISADMPWD does not come installed as part of a standard Windows Server 2003 IIS install.

SYMPTOMS

The IISADMPWD virtual directory allows users to change their account passwords remotely through IIS by means of ASP scripts. IISADMPWD does not come installed as part of a standard Windows Server 2003 IIS install.
 
View the Resolution listed below in order to install the IISADMPWD virtual directory.

RESOLUTION

To create the IISADMPWD virtual directory, follow these steps:
In the Internet Services Manager Microsoft management Console (MMC), expand Web Sites, right-click the Default Web Site, select New, and then select Virtual Directory.
When the Virtual Directory Creation Wizard starts, follow the instructions to create the virtual directory with the alias IISADMPWD. Point the path to the local %systemroot%\System32\Inetsrv\Iisadmpwd directory. For the Access Permissions allow both Read and Run Script privilages.
 
To set the PasswordChangeFlags value in the IIS metabase, do the following:
From a command prompt browse to the C:\Inetpub\Adminscripts directory.
Type adsutil.vbs, and then press the ENTER key. If this is the first time that Adsutil.vbs has been run, you may get error messages stating that Cscript is not registered. Follow the prompts and choose Yes to register Cscript.
Type adsutil.vbs set w3svc/1/PasswordChangeFlags [value].

w3svc/1 represents the Default Web Site and [value] can be set to one of the following options:
0 - SSL connection required
1 - Password changing allowed on non-secure ports.
2 - Password changing disabled.
3 - Password changing disabled. (Undocumented)
4 - Advance notification of password expiration disabled.
 
Users should now be able to change their Local Account password by visiting:
http[s]://[server address]/iisadmpwd/aexp2.asp
Or their Domain Account password by visiting:
http[s]://[server address]/iisadmpwd/aexp2b.asp
Where "s" exists in an SSL connection and "server address" is either the host name or unique IP address of the server.

MORE INFORMATION

Using IISADMPWD without an SSL connection sends the credentials over the network in clear text.  For this reason it is recommended that you use IISADMPWD over an SSL connection.
 
For the Windows 2000/IIS 5.0 version of this article view:

Properties

Article ID: 555071 - Last Review: 14 Feb 2017 - Revision: 1

Microsoft Internet Information Services 6.0, Microsoft Exchange Server 2003 Enterprise Edition, Microsoft Windows Server 2003, Enterprise Edition (32-bit x86), Microsoft Windows Server 2003, Standard Edition (32-bit x86)

Feedback