Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -29,12 +29,12 @@ Identifying staff over the phone can be difficult, especially in large organizat
identifies users by asking them to answer some questions about themselves, and optionally by sending
a verification code to their mobile phone. Incorrect answers are logged, and you can configure
Password Reset to automatically lock out users who give too many incorrect answers. See the
[Configuring Password Reset](/docs/passwordreset/3.3/administrationoverview/configuringpasswordreset/configuring_password_reset.md) topic for additional information.
[Configuring Password Reset](/docs/passwordreset/3.3/administration/configuringpasswordreset/configuring_password_reset.md) topic for additional information.

## Higher Availability

Password Reset is ready to respond to password management requests at any hour of the day and night.
It takes only minutes to install, and can handle thousands of requests every hour.

The [Evaluation](/docs/passwordreset/3.3/evaluationoverview/evaluation_overview.md) topic contains step-by-step instructions to
The [Evaluation](/docs/passwordreset/3.3/evaluation/evaluation_overview.md) topic contains step-by-step instructions to
help you quickly install, configure, and evaluate Password Reset.
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
---
title: "Configuring Password Reset"
description: "Configuring Password Reset"
sidebar_position: 30
---

# Configuring Password Reset

In the previous section, you used Password Reset with a default configuration. You can use the
Configuration Console to edit the configuration settings. Click **Start** > **Netwrix Password
Reset** > **NPR Configuration Console**on the Password Reset Server computer to open the
Configuration Console.

![configuring_npr](/img/product_docs/passwordreset/3.3/administration/configuring_npr.webp)

Information about the configuration console tabs can be found in the following topics:

- [General Tab](/docs/passwordreset/3.3/administration/configuringpasswordreset/general_tab.md)
- [Enroll Tab](/docs/passwordreset/3.3/administration/configuringpasswordreset/enroll_tab.md)
- [E-mail Tab](/docs/passwordreset/3.3/administration/configuringpasswordreset/email_tab.md)
- [Verification Tab](/docs/passwordreset/3.3/administration/configuringpasswordreset/verification_tab.md)
- [Security Tab](/docs/passwordreset/3.3/administration/configuringpasswordreset/security_tab.md)
- [Permissions Tab](/docs/passwordreset/3.3/administration/configuringpasswordreset/permissions_tab.md)
- [About Tab](/docs/passwordreset/3.3/administration/configuringpasswordreset/about_tab.md)
Original file line number Diff line number Diff line change
Expand Up @@ -89,7 +89,7 @@ An attacker may choose a specific language to avoid detection. E-mail alerts are
in the Web Interface language chosen by the attacker if the target user has not enrolled or changed
their password with Password Reset. The target user will receive the e-mail alerts, but they may not
understand them. Use the Rest API to remind new users to enroll so their preferred language is known
to Password Reset. See the [Enroll Tab](/docs/passwordreset/3.3/administrationoverview/configuringpasswordreset/enroll_tab.md) topic
to Password Reset. See the [Enroll Tab](/docs/passwordreset/3.3/administration/configuringpasswordreset/enroll_tab.md) topic
for additional information.

:::
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ Follow the steps below to remove a question from the list.
:::note
You can rearrange questions by dragging them. You can also replace question lists with
text boxes so users can enter their own questions. See the
[Editing the HTML Templates](/docs/passwordreset/3.3/administrationoverview/editing_the_html_templates.md) document for more information
[Editing the HTML Templates](/docs/passwordreset/3.3/administration/editing_the_html_templates.md) document for more information
:::


Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -71,10 +71,10 @@ files in their new location.
**Step 8 –** Start the Password Reset service.

**Step 9 –** Update the backup script to copy from the new folder. See the
[Working with the Database](/docs/passwordreset/3.3/administrationoverview/workingwiththedatabase/working_with_the_database.md) topic for additional information.
[Working with the Database](/docs/passwordreset/3.3/administration/workingwiththedatabase/working_with_the_database.md) topic for additional information.

You can also move the database from SQL Server Compact to SQL Server. See the
[Working with the Database](/docs/passwordreset/3.3/administrationoverview/workingwiththedatabase/working_with_the_database.md) topic for more information.
[Working with the Database](/docs/passwordreset/3.3/administration/workingwiththedatabase/working_with_the_database.md) topic for more information.

### Netwrix Password Policy Enforcer

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -195,7 +195,7 @@ message invites the user to enroll so they can also use the reset and unlock fea

When users enroll into Password Reset, they choose their questions from the Question List. You can
replace some or all of the question lists with text boxes so users can enter their own questions.
See the [Question List](/docs/passwordreset/3.3/administrationoverview/configuringpasswordreset/enroll_tab.md#question-list) topic for additional information.
See the [Question List](/docs/passwordreset/3.3/administration/configuringpasswordreset/enroll_tab.md#question-list) topic for additional information.

The lines you need to edit in en_enroll.htm look like this:

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ the credentials are valid.
Microsoft SQL Server Compact is installed with the Password Reset Server. SQL Server
Compact is free to use, and should only be removed if you move the database to SQL Server. SQL
Server Compact is an embedded database. Unlike SQL Server, you do not need to configure or manage
it. See the [Working with the Database](/docs/passwordreset/3.3/administrationoverview/workingwiththedatabase/working_with_the_database.md) topic for additional
it. See the [Working with the Database](/docs/passwordreset/3.3/administration/workingwiththedatabase/working_with_the_database.md) topic for additional
information.
:::

Expand Down Expand Up @@ -98,7 +98,7 @@ account. The account will be created and added to the Domain Admins group if it
:::note
You can remove the account from the Domain Admins group later. If using an existing
account, make sure it has the required permissions. See the
[Securing Password Reset](/docs/passwordreset/3.3/administrationoverview/securing_password_reset.md) topic for additional information.
[Securing Password Reset](/docs/passwordreset/3.3/administration/securing_password_reset.md) topic for additional information.
:::


Expand Down Expand Up @@ -170,7 +170,7 @@ account. The account will be created and added to the Domain Admins group if it
:::note
You can remove the account from the Domain Admins group later. If using an existing
account, make sure it has the required permissions. See the
[Securing Password Reset](/docs/passwordreset/3.3/administrationoverview/securing_password_reset.md) topic for additional information.
[Securing Password Reset](/docs/passwordreset/3.3/administration/securing_password_reset.md) topic for additional information.
:::


Expand Down Expand Up @@ -258,7 +258,7 @@ recommended if you have not installed NPR before.

The database files are not overwritten during an upgrade, but you should still create a backup
before upgrading. See the
[Backing up the Database](/docs/passwordreset/3.3/administrationoverview/workingwiththedatabase/working_with_the_database.md#backing-up-the-database) topic for additional
[Backing up the Database](/docs/passwordreset/3.3/administration/workingwiththedatabase/working_with_the_database.md#backing-up-the-database) topic for additional
information.

**The Web Interface files are overwritten during an upgrade. You must backup any customized Web
Expand Down Expand Up @@ -293,13 +293,13 @@ between versions should be merged into your customized files.
The Password Reset V3.30 data console does not read the VerificationCode or EnrollRecord columns
from the User table on SQL Server. Access to these columns can be denied for Data Console users
after upgrading all instances of the Data Console. See the
[Using the Data Console](/docs/passwordreset/3.3/administrationoverview/usingthedataconsole/using_the_data_console.md) topic for additional information.
[Using the Data Console](/docs/passwordreset/3.3/administration/usingthedataconsole/using_the_data_console.md) topic for additional information.

## Upgrading From NPR V2.x

As this is a major upgrade with many changes, some planning is needed to ensure a smooth upgrade. A
trial run on a lab network is recommended, especially if you are customizing the user interface. See
the [Editing the HTML Templates](/docs/passwordreset/3.3/administrationoverview/editing_the_html_templates.md) topic for additional information.
the [Editing the HTML Templates](/docs/passwordreset/3.3/administration/editing_the_html_templates.md) topic for additional information.

:::warning
Due to a protocol upgrade, Netwrix Password Reset v3.3 is not compatible with Netwrix
Expand All @@ -317,7 +317,7 @@ later).
**Step 2 –** Close the Data Console if it is open.

**Step 3 –** Stop the Netwrix Password Reset service and backing up the database. See the
[Backing up the Database](/docs/passwordreset/3.3/administrationoverview/workingwiththedatabase/working_with_the_database.md#backing-up-the-database) topic for additional
[Backing up the Database](/docs/passwordreset/3.3/administration/workingwiththedatabase/working_with_the_database.md#backing-up-the-database) topic for additional
information.

### Upgrading to V3.23
Expand Down Expand Up @@ -367,7 +367,7 @@ folder.
**Step 9 –** Start the Netwrix Password Reset service.

**Step 10 –** Update the backup script to copy from the new folder. See the
[Backing up the Database](/docs/passwordreset/3.3/administrationoverview/workingwiththedatabase/working_with_the_database.md#backing-up-the-database) topic for additional
[Backing up the Database](/docs/passwordreset/3.3/administration/workingwiththedatabase/working_with_the_database.md#backing-up-the-database) topic for additional
information.

Configure Password Reset Client to use IE11 emulation mode
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ Server.
The Web Interface and Password Reset Server always communicate over a secure channel. You do not
have to configure the encryption for this connection, but you do need to set up SSL (Secure Sockets
Layer) encryption for the connection between the web browser (or Password Reset Client) and the web
server. See the [Password Reset Client](/docs/passwordreset/3.3/administrationoverview/password_reset_client.md) topic for more information.
server. See the [Password Reset Client](/docs/passwordreset/3.3/administration/password_reset_client.md) topic for more information.

:::warning
Do not use Password Reset on a production network without SSL encryption.
Expand Down Expand Up @@ -76,7 +76,7 @@ users in the axs.net domain:

If Password Reset is configured to use an SQL Server Compact database, then give the service account
read and write permissions to the database files. See the
[Moving to SQL Server](/docs/passwordreset/3.3/administrationoverview/workingwiththedatabase/moving_to_sql_server.md) topic for more information.
[Moving to SQL Server](/docs/passwordreset/3.3/administration/workingwiththedatabase/moving_to_sql_server.md) topic for more information.

Remove the service account from the Domain Admins group and restart the Password Reset service after
executing these commands. Check the Windows Application event log if the service does not start.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ sidebar_position: 20
Netwrix Password Policy Enforcer is a web application. Users can access it from a web browser, or
from the Password Reset Client. The default URL for the Web Interface
is:` http://[server]/pwreset/`
See the [Password Reset Client](/docs/passwordreset/3.3/administrationoverview/password_reset_client.md) topic for more information.
See the [Password Reset Client](/docs/passwordreset/3.3/administration/password_reset_client.md) topic for more information.

You can use URL parameters to open a specific page, and to set the user and domain names. For
example: `http://[server]/pwreset/apr.dll? cmd=enroll&username=johnsmith&domain=CORP`
Expand All @@ -36,8 +36,8 @@ Only enrolled users can reset their password and unlock their account. Users can
answering some questions about themselves, or they can be enrolled automatically if automatic
enrollment is enabled. Users only need to enroll once, but they can enroll again if they are locked
out of Password Reset, or if they want to change their questions or answers. See the
[Verification Codes](/docs/passwordreset/3.3/administrationoverview/configuringpasswordreset/verification_tab.md#verification-codes) and
[Verification Tab](/docs/passwordreset/3.3/administrationoverview/configuringpasswordreset/verification_tab.md) topics for more information.
[Verification Codes](/docs/passwordreset/3.3/administration/configuringpasswordreset/verification_tab.md#verification-codes) and
[Verification Tab](/docs/passwordreset/3.3/administration/configuringpasswordreset/verification_tab.md) topics for more information.

Follow the steps below to manually enroll into Password Reset.

Expand All @@ -48,7 +48,7 @@ Follow the steps below to manually enroll into Password Reset.
**Step 2 –** Type a **Username**, **Domain**, and **Password**.

**Step 3 –** Type an e-mail address if the **E-mail** text box is visible. See the
[Options](/docs/passwordreset/3.3/administrationoverview/configuringpasswordreset/enroll_tab.md#options) topic for more information.
[Options](/docs/passwordreset/3.3/administration/configuringpasswordreset/enroll_tab.md#options) topic for more information.

**Step 4 –** Select a question from each of the **Question** drop-down lists, and type an answer to
each question in the **Answer** text boxes.
Expand Down Expand Up @@ -123,7 +123,7 @@ phone by e-mail or SMS. Type the **Code**, and then click **Next**.
:::note
The Unlock feature unlocks accounts in Active Directory. Users who are locked out of
Password Reset should re-enroll to gain access to Password Reset. See the
[Verification Codes](/docs/passwordreset/3.3/administrationoverview/configuringpasswordreset/verification_tab.md#verification-codes) topic for more information.
[Verification Codes](/docs/passwordreset/3.3/administration/configuringpasswordreset/verification_tab.md#verification-codes) topic for more information.
:::


Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ any time. Filters let you focus on the important information.

You can create simple filters by typing values directly into the filter row, or by selecting values
from Filtering by Column Values. More complex filters are created with the Custom Filters and
[Filter Editor](/docs/passwordreset/3.3/administrationoverview/usingthedataconsole/filter_editor.md) windows.
[Filter Editor](/docs/passwordreset/3.3/administration/usingthedataconsole/filter_editor.md) windows.

### The Filter Row

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ using SQL Server include:
- Improved availability if SQL Server is configured for high availability.
- Increased security.

See solutions to these disadvantages in the [Moving to SQL Server](/docs/passwordreset/3.3/administrationoverview/workingwiththedatabase/moving_to_sql_server.md) topic.
See solutions to these disadvantages in the [Moving to SQL Server](/docs/passwordreset/3.3/administration/workingwiththedatabase/moving_to_sql_server.md) topic.

## Backing up the Database

Expand Down Expand Up @@ -58,7 +58,7 @@ reset\aprlog.bak"

:::note
Change the paths above if the database files are in a different folder. See the
[Database](/docs/passwordreset/3.3/administrationoverview/configuringpasswordreset/general_tab.md#database) topic for more information.
[Database](/docs/passwordreset/3.3/administration/configuringpasswordreset/general_tab.md#database) topic for more information.
:::


Expand Down

This file was deleted.

Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ sidebar_position: 10
# Installation

Password Reset has two server components, and an optional client. See the
[Password Reset Client](/docs/passwordreset/3.3/evaluationoverview/password_reset_client.md) topic for additional information. Both server
[Password Reset Client](/docs/passwordreset/3.3/evaluation/password_reset_client.md) topic for additional information. Both server
components can be installed on one server, or they may be installed on separate servers if your web
server is in a DMZ. As the evaluation server is not in a DMZ, we will install both components on one
server.
Expand Down Expand Up @@ -44,7 +44,7 @@ Click **Next** if you accept all terms.
:::note
The Setup wizard creates the aprsvc account and adds it to the Domain Admins group. You
can remove the account from the Domain Admins group and grant the required permissions later. See
the [Securing Password Reset](/docs/passwordreset/3.3/administrationoverview/securing_password_reset.md) topic of the Password
the [Securing Password Reset](/docs/passwordreset/3.3/administration/securing_password_reset.md) topic of the Password
Reset Administrator's Guide for additional information.

:::
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ hostname of the evaluation server.

You should install an SSL certificate on the web server when using Password Reset on a production
network with real passwords. See the
[Securing Password Reset](/docs/passwordreset/3.3/administrationoverview/securing_password_reset.md) topic for additional
[Securing Password Reset](/docs/passwordreset/3.3/administration/securing_password_reset.md) topic for additional
information.

## Enrolling into Password Reset
Expand Down Expand Up @@ -86,5 +86,5 @@ respective field. Click **Next**.
Password Reset's user interface is built with customizable templates. You can easily modify the user
interface by editing the templates. Even the error messages are defined in the templates, so you can
edit those too. See the
[Editing the HTML Templates](/docs/passwordreset/3.3/administrationoverview/editing_the_html_templates.md) topic of the
[Editing the HTML Templates](/docs/passwordreset/3.3/administration/editing_the_html_templates.md) topic of the
Administrator's Guide for additional information.
Loading