Password Reset PRO is the only enterprise-class web based self service software designed specifically for secure external (public) access by end users, allowing them to quickly change or reset their domain password and unlock their account without IT intervention. It is very easy to install, test and deploy, no databases required or changes to the domain, no disturbing users. Our sales, support and development is 100% USA-based in Los Angeles, California.

Perfect for today's "BYOD" environment without compromising security, users can access password self service quickly from any mobile device browser (iPhone, Android, BB, WM) or OS (Mac, Win, Linux). All aspects of the self service web portal pages are customizable, assuring proper branding for your environment. Perimeter security is assured using our unique two-tier architecture and multiple iAES / RSA encryption layers on communications, in addition to website SSL.

Try it free for 30 days and see why Password Reset PRO is the #1 password selfservice solution worldwide.

Gov, Mill, DoD, Edu, Asp / Msp? You are in the right place for a secure, enterprise class product!

>  Easy to install, test, deploy. No changes to AD or DB installs, up in 10 minutes
>  Built for HA, DR, scalability, virtually impossible to "lose" user enrollments, easy to LB sites
>  PCI & regulatory compliant Web Based Self Service portal allows safe external public access
>  External facing Web Portal runs on IIS6/7; easy to deploy multiple web portals for HA/DR
>  Runs great on VM's, dedicated servers NOT required, NO install on DCs required
>  Sensitive user data and admin functions stay AWAY from the external-facing Web Portal
>  Three access modes to choose from, all aspects are customizable for look / feel / branding
>  Users can enroll with a "must change on next logon" password or an expired password!
>  Active Directory password policies are natively enforced
>  Currently used by SMB's, F500's, Gov, Mil, Edu's world-wide
>  Supports large domains of 300,000+ users with ease; multiple domains / forests no problem



Self Service Made Easy: Password Reset PRO's web based self service web portal allows remote & internal employee users to change forgotten, expiring or expired passwords, unlock locked out accounts and even change a temporary "change on next logon" password. The web based self service portal provides three types of user access modes to choose from for deployment, or multiple modes can be deployed simultaneously. One of the modes uses intuitive image-based authentication security similar to banking websites, making it simple for remote users to enroll & remember their enrollment logon ID.  Another mode uses information stored in your Active Directory for creating a question / answer style of access. Users are guided through all modes and pages of the self service portal by "activity wizards", providing simplicity for even the most technically challenged user. The web based self service portal can be accessed from the internet or LAN from any popular client OS, mobile device and web browser.

Secure eCommerce-Style Architecture: Easy to deploy? You bet!! Built on ASP.NET and designed for secure external access, our product uses a "Two Tier" design architecture just like modern eCommerce websites. Deploy the web based self service portal on any extranet IIS server. Deploy the internal service application on an internal domain server. Configure a single TCP port through your LAN firewall for communication between the two servers. Sensitive system components and administrator access functions reside on the internal server separate from the external web self service portal, ensuring maximum perimeter security. Passwords and account info are only stored in AD, nowhere else. The tiered architecture also makes it easy to quickly move or rebuild the web portal, or deploy multiple web based self service portals behind a load balancer.  As an option, small environments can install everything on a single server.

Change Control and Security Friendly: No schema extending, databases or client deployments are required. User Passwords and sensitive domain data are *only* stored in Active Directory, and the password self service web portal itself does NOT run with domain credentials or need to be installed on a domain member server (unlike other similar products). You'll find a very low change-control footprint with our product, a very high degree of security, and you will be pleased with how easy it is to install & use. Designed by Active Directory architects and security experts, our employee self service solution blows similar competing products away with ease of installation, usability, security and integration. Try it today and see the difference!

* account required to access downloads- click download button to create new account, or login at top of page


Downloading Software, Trial Keys and Requesting Price Quotes:

Access to software downloads, trial keys and price quotes requires registering an account on our website. All downloads are "full version" software, not Trialware. Your trial license key will expire in 30 days. Should you decide to purchase, we will issue you a permanent, non-expiring key which replaces your trial key. If you need a trial extension or keys for multiple domains please contact us, we'll be happy to help. 


Product Highlights:

• Modern Self Service Security: Password Reset PRO uses the modern, proven approaches to self service system enrollment and login. Enrollment is fast, simple, and easy to remember, and we give you three different types of deplyable access modes to choose from. Plus, you can run multiple access modes simultaneously!
  Password Reset PRO does NOT use out-dated "question-and-answer" security methods for identity creation / login since it is typically difficult for a user to remember, resulting in help desk calls to reset their portal ID access. Your identity management product should reduce overall IT support overhead, not add to it!
• Wizard Driven User Interface: All three access modes are "wizard driven" and easy to use for even the most non-tech end user. A new enrolling user is given clear steps and process. Once the user has enrolled and logged in, an "activity page" shows their account status and guides them through necessary activties such as changing / resetting a password or unlocking an account. Everything is made easy for the user, there is no guessing or training involved.
• Admin Auditing: Daily web portal account activities are logged for SOX / HIPAA / GLB / PCI regulatory compliance needs. In regards to specific PCI compliance requirements, a reason must be entered by the user when unlocking their account via the portal. An unlock account alert is sent to the administrator in real time with the reason data, and is also captured in the daily logging. An admin can see which domain users have not yet enrolled in the portal, reset a user portal ID and ban accounts from using the portal.
• Company Branding: Customize the web portal logo banner, browser title bar text, global footer and other specific messages in the portal to your company's needs. n addition, we allow you to edit the actual pages, CSS, images, wording- practically everything is changable! Your users will feel like they are using a company-developed system vs. a 3rd-party software product.
• Designed for External Deployment with Two-Tier Security: Deployment of the self service web portal is simple and requires minimal change control planning. The web portal can be deployed on a non-domain DMZ web server (Extranet), and connects to the internal service server (Intranet) via a single TCP port. Port connectivity uses an RSA authentication handshake, and wire-level communication between web portal server and internal service server is AES-encrypted. All components can be installed on a single server for use in smaller environments if neccessary. Absolutely no other software comes close to our security approach.
• No Externally Stored Data, No Exposed Admin Access: All sensitive user data resides in Active Directory only, and portal administration is managed through a separate internal secure application. No user account data or passwords are stored on the web front end portal server, registry or extra databases, ensuring ultimate web perimeter security.
• Unique "Works Anywhere" Architecture: No schema extensions or modified client GINA deployments are required. No SQL/MySql databases. Web portal access is 100% web-based and accessible by any OS / web browser.  If your company is under strict change control guidelines, regulatory compliance, has a mixed OS or older domain environment and needs the ultimate in product security & flexibility, you'll greatly appreciate Password Reset PRO.
• PCI Scan Tested: The front end web portal has been developed to pass strict PCI compliance external scan testing, in accordance with known ASR's and will pass all apsects of the self-assessment questionnaire (SAQ).  
  

Password Reset PRO is the best-of-breed when it comes to enterprise web-based user account self service and identity management software, and is a true "set it and forget it" solution.

Ultra-reliable and secure password self service software created by a team of Active Directory experts- Don't trust your sensitive password change needs to questionable products that require extending the schema, desktop client installs, SQL or MySql databases, "agents" on DC's, "admin pages" in the web portal itself, or (gasp!) domain admin credentials needed to run the actual website application on the web server itself! Keep it simple, do it right the first time and reap the rewards- Go Password Reset PRO!

Password Reset PRO is the only web based self-service & employee identity management solution offering such a robust set of features, high security, fault tolerance and very simple deployment:

• Change an expiring password or reset an expired / forgotten password. User can enroll with & change a temporary password (change password on next logon )
• iPhone and web-capable mobile device access natively supported!
• Three different types of self service modes to choose from!
• Unlock a locked account in PCI-compliant, regulatory compliant manner
• Wizard-guided profile enrollment and change password / unlock account activities
• User can request administrator assistance via web contact form in the self service portal
• Brand self-service portal pages with your company name / logo, and set custom user messages, change global images, colors, practically everything!
• Domain password policy requiremements automatically enforced
• PCI scan-tested web portal assures you will pass quarterly PCI perimeter scans
• No schema changes to Active Directory, no MSGINA client deployments, No SQL installs
• Uses Active Directory as the database and uses native Active Directory security functions, virtually impossible to lose user enrollments, high degree of DR built in
• All user data and passwords are ONLY stored in Active Directory, nowhere else!
• No "admin pages" on Web Portal ensures ultimate perimeter security for external use 
• Easy to install, can be tested silently in your live domain without disturbing any users
• Can be deployed in a two-tier (two servers) or single-tier (single server) architecture 
• User portal is 'personalized' to each logged-on user by name and account status
• Easily support "problem" change password policy users (OWA, VPN, Contractors, Mac, Linux)
• Receive daily detailed audit report via email of all account activities on the portal
• Receive real-time admin alerts on specific events such as acount unlock (PCI compliant)
• Web Portal activities are written to Windows event log for capture by monitoring software
• Web portal is built on ASP.NET / AJAX 2.0 and runs as a standard web application on your IIS6/7/7.5 server, with simple external publishing of portal access via HTTPS. Support the web portal as easily as any regular data-driven ASP.NET website
• Internal back-end secure service runs on a domain member server (2003 / 2008 2008R2 x86 & x64) and can be deployed completely separate from the public web portal
• Communication between the web portal and back-end service is 128-bit encrypted and uses an RSA key pair for connectivity, ensuring extremely high security.

• COMING SOON: Multi-language support packs for the web portal
  

Using Password Reset PRO will help you easily maintain a secure active directory and ensure that all of your password expiring and account expiring users remain productive.
You want easy? We've got it!

Easy to test and deploy, there are no databases to install or schema changes to make. Our software uses Active Directory as the "database" ensuring all sensitive user info remains in AD, and makes it virtually impossible to "lose" use enrollments. The Web Portal is built on ASP.NET and deploys just like a regular IIS website. There are no "admin" functions in the web portal which could contain sensitive user data / passwords and compromise domain security, and the web portal IIS site itself does not use ANY domain credentials.

Installation requirements for Password Reset PRO are very minimal, install takes 5-10 mins. If you know a bit about Active Directory, Windows Services, and IIS website management, you'll have a very easy time with our software:

• Front-end Web Portal application requires IIS6 or IIS7/7.5 and .NET framework 2.0 and can be installed on a non-domain IIS server that runs other websites
• Back-end Master Service application requires .NET framework 2.0 and must be installed on a domain member server
• VM or physical server, dedicated server NOT required, no install on DCs required, 10mb HDD space, 1gb free RAM, min 1ghz proc
• Windows 2003 / 2008 / 2008R2 (x86 or x64), runs as a native 64-bit app on x64
• Web Portal application can be installed on the same domain server as the Back-End Master Service application (Single Tier architecture), or on a separate non-domain DMZ web server for enhanced perimeter security (Two Tier architecture)
• You must have administrator rights in the domain and on the local server to install and configure Password Reset PRO
• You must use an elevated-credential domain account to run the Back-End Master Service. Typically, Domain Admin rights are required since the Master Service must be able to read / write to all domain user accounts that will accesss the Web Portal. This requirement is similar for other enterprise-level application services such as Exchange or other Enterprise management software. Service rights can be delegated for production use, detaield security rights are outlined in the software documentation

Tech Notes:

 

TWO-TIER ARCHITECTURE DEPLOYMENT- When installing the Web Portal "Front End" on a DMZ server separate from the "Back-End" Master Service server, you must open one TCP port in your firewall for the Web Portal server to communicate to the Master Service server. Communication between the two servers uses an RSA rotating key scheme for session connectivity, and contents of the communication stream are encrypted with AES security at the packet level.

 

 

Setting up multiple web portals for failover / HA is a snap- Check out the architecture diagrams:
 > Basic Network Architecture Diagram (pdf)
 > Basic Network Architecture Diagram (Visio)
 > Advanced Network Architecture Diagram (pdf)
 > Advanced Network Architecture Diagram (Visio)

• You may purchase the exact number of user licenses for your needs (110, 561, 3240, etc)- Request a quote from us for your exact cost.  ** Ask about our low cost "Unlimited User" price for individual domains or OUs with over 7500 users!
• Optional annual maintenance and support agreement is 15% of the total license cost, renewable annually
• Easy to add additional users to your purchased license key at any time
• At 7500 or more users in a single domain or OU, we issue you an "unlimited user" license key for that domain or OU- An excellent value!
• Your issued license key is for use in a single domain, single child domain, or single OU
• You can use multiple OU license keys within the software's single installation

Option 2 - Annual License Key:
Purchase your license key at a substantially reduced annually renewable rate. Your license key is valid for a period of one year from time of purchase, and you must renew your license key annually to keep Password Reset PRO active. Annual licenses include all software upgrades, maintenance & support.

• The minimum cost of an annual license key is 400 Users at a cost of $1,148  
• Maintenance and support agreement is included in the annual license price
• You may purchase the exact number of user licenses for your needs (110, 561, 3240, etc)- Request a quote from us for your exact cost.  ** Ask about our low cost "Unlimited User" price for individual domains or OUs with over 10,000 users!
• Easy to add additional users to your purchased license key at any time
• At 10,000 or more users in a single domain or OU, we issue you an "unlimited user" license key for that domain or OU- An excellent value!
• Your issued license key is for use in a single domain, child domain, or specific OU
• You can use multiple specific OU license keys within the software's single installation

Multiple Domain and Specific OU Licensing:
If you need to buy licenses for multiple domains, talk to our Sales Team about our discounted multi-domain pricing structure. Licensing for individual and multiple OUs is available.


NOTE: While our licensing method does require you to contact us directly for licensing & price quotes, we feel that you will be pleased with the resulting lower cost, personalized service and speedy handling of any immediate questions. We absolutely love what we do and look forward to working with you.