New-password policy

[Nando]

Hi all!

I'm using the User.NewPassword (strOldPassword, strNewPassword) method to
allow users to change their password.

I'm using the same code to reset passwords for users who have forgotten
their passwords. I do not have to specify the old password if I'm logged on
as a member of the Admins group. But I just noticed that I cannot reset the
passwords for other fellow members of the Admins group.

Is my convoluted code failing somewhere or is this behavior by design? The
Access' help does not fully cover or explain this policy.

Thanks!

 

['69 Camaro]

Hi, Nando.

Is my convoluted code failing somewhere or is this behavior by design?

I suspect it's your code. Ensure that an empty string is being passed as
the old password, that the user name is valid, and that the new password is
a valid password not exceeding 14 characters. The owner of the database and
any member of the Admins group are able to reset any user's password.

HTH.
Gunny

See http://www.QBuilt.com for all your database needs.
See http://www.Access.QBuilt.com for Microsoft Access tips and tutorials.
Blogs: www.DataDevilDog.BlogSpot.com, www.DatabaseTips.BlogSpot.com
http://www.Access.QBuilt.com/html/expert_contributors2.html for contact
info.

 

[Nando]

Hi, Nando.


I suspect it's your code. Ensure that an empty string is being passed as
the old password, that the user name is valid, and that the new password
is a valid password not exceeding 14 characters. The owner of the
database and any member of the Admins group are able to reset any user's
password.

Hmmm... not quite. I think I have located the problem. It seems that Joe
(part of the Admins) is able to reset passwords for other logins (with
oldpassword = ""). However he is unable to reset his own. So it sounds like
an account part of the Admins can reset/set passwords for any account
without having to specify the old password. But it cannot reset/set to
itself (unless it specifies the old password).

That makes sense, though it is not on the documentation. But the error you
get doesn't: "Error 3033: You do not have the necessary permissions to use
the 'Joe' object. Have your system administrator or the person who created
this object establish the appropriate permissions for you." Quite
interesting.