Allowing Password Changes via OWA (Admin Note)

On the Server that host Microsoft Exchange, run Regedit.

Navigate to:

HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ MSExchangeWEB \ OWA
Change the value of DisablePassword REG_DWORD from 1 to 0

Creating the IISADMPWD Virtual Directory with IIS Manager:

1. Click Start | All Programs | Administrative Tools | Internet Services Manager.
2.  Expand Local Computer | Web Sites.
3. Right-click the Default Web Site and point to New, then click Virtual Directory.
4. The Virtual Directory Creation Wizard is launched. Click Next.
5. In the Virtual Directory Creation Wizard, type IISADMPWD in the Alias box, then click Next.
6. You now need to specify the directory path. Type C:\windows\system32\inetsrv\iisadmpwd, then click Next.
7. Verify that only the Read and Run scripts (such as ASP) check boxes are set, then click Next and then Finish.

Additional Notes:

After you apply this hotfix, follow these steps to configure the Password Change functionality:

 1. Apply the hotfix to update the files on the computer that is running IIS or install service pack 1 for Windows 2003. The hotfix will automatically register the module and you can proceed to step 3. If Service Pack 1 has been installed without the hotfix, you must manually register the module.
2. Register the IISpwchg.dll file in the Iisadmpwd directory: a.  Click Start, and then click Run.
b.  In the Open box, type the following, and then press ENTER:
regsvr32 c:\windows\system32\inetsrv\iisadmpwd\iispwchg.dll
 
3. Configure the PasswordChangeFlags property in the metabase to make sure that the Password Change functionality is enabled: a.  Click Start, and then click Run.
b.  In the Open box, type cmd, and then press ENTER.
c.  Locate the C:\Inetpub\Adminscripts directory.
d.  Type the following command, and then press ENTER:
cscript.exe adsutil.vbs set w3svc/passwordchangeflags 1

Note In this sample command, Value is a placeholder for the value that you want to set for the PasswordChangeFlags property. 
 
0: This is the default value. This value indicates that you must use a Secure Sockets Layer (SSL) connection when you change the password.
• 1: This value permits password changes on non-secure ports. This value is useful if SSL is not enabled.
• 2: This value disables the Password Change functionality.
• 4: This value disables the advance notification of password expiration.
 
5. Make sure that the virtual directory for the Iisadmpwd directory is correctly created and that it points to the correct location. The correct location is System32\Inetsrv\Iisadmpwd.

To create a virtual directory for the Iisadmpwd directory, follow these steps:a.  Click Start, click Programs, click Administrative Tools, and then click Internet Information Services (IIS) Manager.
b.  In Internet Information Services (IIS) Manager, right-click the Web site where you want the Iisadmpwd folder, click New, and then click Virtual Directory.
c.  When the Virtual Directory Creation Wizard starts, follow the instructions to create the virtual directory with the alias that is named "IISADMPWD." Make sure that the path points to the Windows\System32\Inetsrv\Iisadmpwd directory. Make sure that both "Read" permissions and "Run Scripts (such as ASP)" permissions are selected.
 
6. Make sure that the Iisadmpwd virtual directory runs in the same application pool as the Web site that uses the Password Change functionality. For example, if the Password Change functionality is used in your Microsoft Outlook Web Access (OWA) Web site, the Iisadmpwd virtual directory must run inside the Exchange application pool where the OWA site resides.

Note We recommend that the authentication for IISADMPWD is the same as the application that is using this functionality. Anonymous Authentication is not required to be enabled on this virtual directory.

To configure the IISADMPWD virtual directory, do the following:
1. Click Start, point to Programs, point to Administrative Tools, and then click Internet Services Manager. 
2. Right-click the default Web site, point to New, and then click Virtual Directory.
3. In the Virtual Directory Creation wizard, type IISADMPWD in the Alias box, and then click Next.
4. In the Directory box, type :\winnt\system32\inetsrv\iisadmpwd or the location where your hard disk is your default hard disk, and then click Next.
5. Verify that only the Read and Run script check boxes are selected, such as the ASP check box, click Next, and then click Finish.
6. Verify that the IISADMPWD virtual directory has only basic authentication set and, if you use Windows 2003/IIS 6.0, verify that the application pool is set to ExchangeApplicationPool.