By default when using the "Change Password" tool under the "Admin" toolbar, you are not permitted to change the password of a user belonging to an Active Directory group that contains that word "admin", "staff" and "personnel". You have the ability to edit the default filter names:
- Open "regedit"
- Navigate to:
32 bit - "HKEY_LOCAL_MACHINE\Software\Impero Solutions Ltd\ImperoV3"
64 bit - "HKEY_LOCAL_MACHINE\Software\Wow6432Node\Impero Solutions Ltd\ImperoV3"
- You may need to reset someone's password if you do not see the key. A new key is created called "FailPasswordResetIfInADGroup" which is a string field after the first password reset from within the Impero Console.
- In this key you have a comma-separated list of AD groups that are immune from the password reset function.
- This is wildcard based, using the asterisk * key.
- You can edit this key to add/remove/edit the group names that are exempt from password changes.