We are currently successfully using ISA server to
authenticate users before they access a website that is
on the internal network. Both the ISA server on the DMZ
and the webserver on the internal network are in the same
AD 2000 domain. All users who access the system do so
over the Internet through SSL. There are no local users.
We successfully have users using the iisadmpwd facility
to change the password of the currently logged on user.

How do we enable the following:
* Can we have a group of 'admin' users who are able to
remotely change passwords of other users through a web
page, after these 'admins' are authenticated?
* Can we display the number of days until the logged on
user's password will expire on a web page, so that users
change their password before they are unable to log in to
change it?
* Can we create a web page that will enable a specified
group of authenticated users to create new accounts?

Thanks, any help for any of those three questions would
be helpful...

[ Post a follow-up to this message ]