Password Reset PRO is an easy to deploy web based identity management portal for Active Directory and allows your employees to remotely self service a password change, password reset or account unlock. Try it in your domain today absolutely free and see the results.

>  Easy to deploy, no changes to AD, no DB installs, up and running in 10 minutes
>  PCI scan tested Web Based Self Service Portal designed for safe external use
>  ASP.NET Web Portal runs on IIS6/7, easy to deploy multiple portals for failover
>  Sensitive user data and admin functions stay AWAY from the Web Portal
>  Image-based ID enrollment, no user training- as easy to use as a banking website!
>  Give new remote users a temp password and let them self-service a permanent one!

Self Service Made Easy: Password Reset PRO's web based self service web portal allows remote & internal employee users to change forgotten, expiring or expired passwords, unlock locked out accounts and even change an admin-issued temporary password. The web based self service portal uses intuitive image-based authentication security similar to banking websites, making it simple for remote users to create & remember their portal logon ID.  Users are guided through the identity management portal by "activity wizards", providing simplicity for even the most technically challenged user. The web based self service portal can be accessed from the internet or LAN from any popular client OS and web browser.

Secure eCommerce-Style Architecture: Easy to deploy? You bet!! Built on ASP.NET and designed for secure external access, our product uses a "Two Tier" design architecture just like modern eCommerce websites. Deploy the web based self service portal on any extranet IIS server. Deploy the internal service application on an internal domain server. Configure a single port through your firewall for communication between the two servers. Sensitive system components and administrator access functions reside on the internal server separate from the external web self service portal, ensuring maximum perimeter security. Passwords and account info are only stored in AD, nowhere else. The tiered architecture also makes it easy to quickly move or rebuild the web portal, or deploy multiple web based self service portals behind a load balancer.  As an option, small environments can install everything on a single server.

Change Control and Security Friendly: No schema extending, databases or client deployments are required. User Passwords and sensitive domain data are *only* stored in Active Directory (unlike some other similar products). You'll find a very low change-control footprint with our product and you will be pleased with how easy it is to install & use. Designed by Active Directory architects and security experts, our employee self service solution blows similar competing products away with ease of installation, usability, security and integration. Try it today and see the difference!

* account required to access downloads- click download button to create new account, or login at top of page


Key Product Highlights:

• Modern ID Security Profiles: Password Reset PRO uses the modern "online banking" approach to portal identity creation and login. A user chooses a "memorable" security image and creates a matching security word to establish a secure ID login profile. Enrollment is fast, simple, and easy to remember.
  Password Reset PRO does NOT use out-dated "question-and-answer" security methods for identity creation / login since it is typically difficult for a user to remember- Resulting in help desk calls to reset their portal ID access. Your identity management product should reduce overall IT support overhead, not add to it!
• Wizard Driven User Interface: ID Profile creation is "wizard driven" and easy to use for even the most non-tech end user. A returning user logs in to the portal by simply entering their NT Account Name + Security Image + Matching Security Word. Once the user is logged in, an "activity page" shows their account status and guides them through necessary activties such as changing / resetting a password or unlocking an account. Everything is made easy for the user, there is no guessing involved.
• Admin Auditing: Daily web portal account activities are logged for SOX / HIPAA / GLB / PCI regulatory compliance needs. In regards to specific PCI compliance requirements, a reason must be entered by the user when unlocking their account via the portal. An unlock account alert is sent to the administrator in real time with the reason data, and is also captured in the daily logging. An admin can see which domain users have not yet enrolled in the portal, reset a user portal ID and ban accounts from using the portal.
• Company Branding: Customize the web portal logo banner, browser title bar text, global footer and other specific messages in the portal to your company's needs. Your users will feel like they are using a company-developed system vs. a 3rd-party software product.
• Designed for External Deployment with Two-Tier Security: Deployment of the self service web portal is simple and requires minimal change control planning. The web portal can be deployed on a non-domain DMZ web server (Extranet), and connects to the internal service server (Intranet) via a single encrypted port. Port connectivity uses an RSA authentication handshake, and communication between web portal server and internal service server is blowfish-encrypted. All components can be installed on a single server for use in smaller environments if neccessary.
• No Externally Stored Data, No Exposed Admin Access: All sensitive user data resides in Active Directory only, and portal administration is managed through a separate internal secure application. No user account data or passwords are stored on the web front end portal server, registry or extra databases, ensuring ultimate web perimeter security.
• Unique "Works Anywhere" Architecture: No schema extensions or modified client GINA deployments are required. SQL is not needed. Web portal access is 100% web-based and accessible by any OS / web browser.  If your company is under strict change control guidelines, has a mixed OS or older domain environment and needs the ultimate in product flexibility, you'll greatly appreciate Password Reset PRO.
• PCI Scan Tested: The front end web portal has been developed to pass strict PCI compliance external scan testing.  
  

Password Reset PRO is the best-of-breed when it comes to web-based user account self service and identity management software, and is a true "set it and forget it" solution.

Downloading Software, Trial Keys and Requesting Price Quotes:

Access to software downloads, trial keys and price quotes requires registering an account on our website. All downloads are "full version" software, not Trialware. Your trial license key will expire in 30 days. Should you decide to purchase, we will issue you a permanent, non-expiring key which replaces your trial key. If you need a trial extension or keys for multiple domains please contact us, we'll be happy to help. 

Ultra-reliable and well supported self service software created by a team of Active Directory experts- Don't trust your important enterprise application needs to "outdatedware" and products that require expensive infrastructure changes such as extending the schema, custom client dll installs, etc. Keep it simple, do it right the first time and reap the rewards- Go Password Reset PRO!

Password Reset PRO is the only web self-service & employee identity management solution offering such a robust modern set of features and ultra-simple deployment:

• Allow new user to change temporary password (change password on next logon) 
• Change expiring password, or reset an expired / forgotten password
• Unlock account in PCI-compliant manner
• Wizard-guided profile enrollment and change password / unlock account activities
• User can request administrator assistance via web contact form in the self service portal
• Brand self-service portal with your company name / logo, and set custom user messages
• Enforce domain password complexity requiremements when user changes password
• PCI scan-tested web portal assures you will pass quarterly PCI perimeter scans
• No schema changes to Active Directory, no MSGINA client deployments, No SQL installs
• Uses Active Directory as the database and uses native Active Directory security functions
• All user data and passwords are ONLY stored in Active Directory, nowhere else!
• No "admin pages" on Web Portal ensures ultimate perimeter security for external use 
• Easy to install, can be tested silently in your live domain without disturbing any users
• Can be deployed in a two-tier (two servers) or single-tier (single server) architecture 
• User portal is 'personalized' to each logged-on user by name and account status
• Easily support "problem" change password policy users (OWA, VPN, Contractors, Mac, Linux)
• Receive daily detailed audit report via email of all account activities on the portal
• Receive real-time admin alerts on specific events such as acount unlock (PCI compliant)
• Web Portal activities are written to Windows event log for capture by monitoring software
• Web portal is built on ASP.NET / AJAX 2.0 and runs as a standard web application on your IIS6/7 server, with simple external publishing of portal access via HTTPS. Support the web portal as easily as any regular data-driven ASP.NET website
• Internal back-end secure service runs on a domain member server (2003 / 2008 x86 & x64) and can be deployed completely separate from the public web portal
• Communication between the web portal and back-end service is 128-bit encrypted and uses an RSA key pair for connectivity, ensuring extremely high security.
• COMING SOON: Sharepoint plugin. Run the ID management portal directly in MOSS!
• COMING SOON: iPhone and Mobile Device access!
• COMING SOON: Multi-language support packs for the web portal
  

Using Password Reset PRO will help you easily maintain a secure active directory and ensure that all of your password expiring and account expiring users remain productive.
You want easy? We've got it!

Easy to test and deploy, there are no databases to install or schema changes to make. Our software uses Active Directory as the "database" ensuring all sensitive user info remains in AD. The Web Portal is built on ASP.NET and deploys just like a regular IIS website. There are no "admin" functions in the web portal which could contain sensitive user data / passwords and compromise domain security.

Installation requirements for Password Reset PRO are very minimal:

• Front-end Web Portal application requires IIS6 or IIS7 and .NET framework 2.0
• Back-end Master Service application requires .NET framework 2.0 and a domain server
• For detailed requirements please review the Installation and Settings Guide (pdf)
• Installs on Windows 2003 / 2008 (x86 or x64), runs as a native 64-bit app on x64
• Web Portal application can be installed on the same domain server as the Back-End Master Service application (Single Tier architecture), or on a separate non-domain DMZ web server for enhanced perimeter security (Two Tier architecture)
• You must have administrator rights in the domain and on the local server to install and configure Password Reset PRO
• You must use an elevated-credential domain account to run the Back-End Master Service. Typically, Domain Admin rights are required since the Master Service must be able to read / write to all domain user accounts that will accesss the Web Portal. This requirement is similar for other enterprise-level application services such as Exchange or other Enterprise management software

Tech Notes:

 

TWO-TIER ARCHITECTURE DEPLOYMENT- When installing the Web Portal "Front End" on a DMZ server separate from the "Back-End" Master Service server, you must open one port in your firewall for the Web Portal server to communicate to the Master Service server. Communication between the two servers uses an RSA rotating key scheme for connectivity, and contents of the communication stream are encrypted with Blowfish 128-bit security.

 

The domain\user account used to run the Back-End Master Service on the internal domain server must have read & write access to your Active Directory user accounts.

 

Setting up multiple web portals for failover / HA is a snap- Check out the architecture diagrams:
 > Basic Network Architecture Diagram (pdf)
 > Basic Network Architecture Diagram (Visio)
 > Advanced Network Architecture Diagram (pdf)
 > Advanced Network Architecture Diagram (Visio)

• You may purchase the exact number of user licenses for your needs (110, 561, 3240, etc)- Request a quote from us for your exact cost.  ** Ask about our low cost "Unlimited User" price for individual domains or OUs with over 7500 users!
• Optional annual maintenance and support agreement is 15% of the total license cost, renewable annually
• Easy to add additional users to your purchased license key at any time
• At 7500 or more users in a single domain or OU, we issue you an "unlimited user" license key for that domain or OU- An excellent value!
• Your issued license key is for use in a single domain, single child domain, or single OU
• You can use multiple OU license keys within the software's single installation

Option 2 - Annual License Key:
Purchase your license key at a substantially reduced annually renewable rate. Your license key is valid for a period of one year from time of purchase, and you must renew your license key annually to keep Password Reset PRO active. Annual licenses include all software upgrades, maintenance & support.

• The minimum cost of an annual license key is 400 Users at a cost of $1,148  
• Maintenance and support agreement is included in the annual license price
• You may purchase the exact number of user licenses for your needs (110, 561, 3240, etc)- Request a quote from us for your exact cost.  ** Ask about our low cost "Unlimited User" price for individual domains or OUs with over 10,000 users!
• Easy to add additional users to your purchased license key at any time
• At 10,000 or more users in a single domain or OU, we issue you an "unlimited user" license key for that domain or OU- An excellent value!
• Your issued license key is for use in a single domain, child domain, or specific OU
• You can use multiple specific OU license keys within the software's single installation

Multiple Domain and Specific OU Licensing:
If you need to buy licenses for multiple domains, talk to our Sales Team about our discounted multi-domain pricing structure. Licensing for individual and multiple OUs is available.


NOTE: While our licensing method does require you to contact us directly for licensing & price quotes, we feel that you will be pleased with the resulting lower cost, personalized service and speedy handling of any immediate questions. We absolutely love what we do and look forward to working with you.