Re: changePassword, setPassword and pwdhistorylength, minpwdage

This is the normal expected behavior.

SetPassword is intended for administrative resets by the administrator. 
Administrative resets need to be able to ignore the min pwd age and
history 
because they are typically only done in non-standard situations.

SetPassword is often adapted for use in a self-service password reset 
capacity, but it was never really intended for that, so the rules that
apply 
to administrative resets are still enforced there as well.

You cannot change the behavior of SetPassword.  However, unless you
somehow 
had the previous password available, you cannot call ChangePassword
either.

Joe K.
-- 
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services
Programming"
http://www.directoryprogramming.net
--
"Janette" <jtowell@[EMAIL PROTECTED]
> wrote in message 
news:%23apTKds8IHA.5556@[EMAIL PROTECTED]
> Hi,
>
> I am working on a system that requires the implementation of 
> pwdhistorylength and a minpwdage. Previously the system used 
> changePassword when the user could remember their password and wanted to

> change it, and uses setPassword when they are changing their password
via 
> the help of a secret question and answer. I have just discovered whilst 
> testing that the setPassword method appears to ignore the password
policy 
> attributes such as pwdhistorylength and minpwdage. Can anyone explain
why 
> this might happen, and if there is any way of enforcing the password 
> policy regardless of the method that is called to change the password.
>
> Thanks in advance
> Janette
>
>
>