-
Navigate to the API Keys link from the right navigation menu.
-
On the API page, click on Create.
-
Click Yes to create the Password Propagation Key.
-
Copy the API Key for later use when installing the Password Propagation Service.
Enabling Password Propagation Service
Installing Password Change Service
-
On the source environment, click the QuestPasswordPropagationService icon. The install wizard appears.
-
Click Next on the Welcome screen.
-
Read and accept the License Agreement. Click Next.
-
Check the DS Password Change Service and DS Password Change WebService features and click Next. Both features are required.
-
Enter a security passphrase for communicating with Password Propagation Services installed on other computers. This phrase must match the phrase used to install the Password Filter. The passphrase must be at least 15 characters long. Click Next.
-
Enter the Password Propagation API Key found on the API Keys page. Click Next.
-
Select or install the SSL certificate to use to securely access the QDSPwChange site. The default port is 443 and can be changed if needed. Click Next.
Note: The SSL certificate can be preconfigured. See Internet Information Services (IIS) Server Certificate Installation Instructions at Microsoft for more information.
-
Click Install.
-
Click Finish on the Complete screen.
Configuring Password Propagation Server
Use the Password Change WebService to configure The target environment where the passwords will be changed.
-
Click on the DS Password Change WebService icon. The Password Propagation Server Configuration page will open.
-
On the Environment Configuration page, click Add Forest.
-
Enter a Forest Name and Default Credential. Click Save.
-
Click Add Domain to add one or more Active Directory domains to the forest.
-
Enter the Domain Name and optional Credential. If left blank, the forest credentials will be used. Enter the Global Catalog name.
-
Click Select Domain Controller and then click Select next to the Domain Controller you wish to use.
-
To configure the LDAPS Certificates, click either Add Certificate Thumbprint to add the thumbprint or click Load Certificate from Domain Controller to retrieve the thumbprint from the Domain Controller.
Note: See How to: Retrieve the Thumbprint of a Certificate at Microsoft for more information.
-
Click Save.
-
To add additional domains, return to the Forest page and click Add Domain.
Installing Password Filter
The Password Filter is installed on every Domain Controller in the source. The filter detects password changes in the source and sends the password information to the Change Service to set in the target.
-
On the Domain Controller, click the QuestDirectorySyncPasswordFilter icon. The install wizard appears.
-
Click Next on the Welcome screen.
-
Read and accept the License Agreement. Click Next.
-
Check the Password Change Propagation feature and click Next. The install wizard can also install the Modern Password Copy feature if needed.
-
Enter a security passphrase for communicating with Password Propagation Services installed on other computers. This phrase must match the phrase used to install the Change Service. The passphrase must be at least 15 characters long. Click Next.
-
On the Quest Propagation Service URL page, enter the FQDN of the server running the "Quest DS Password Change Service" or leave the field blank if you have a DNS SRV record for "_qdspwchange". Click Next.
-
Click Install.
-
Click Finish. You must restart the computer before the program.
-
Repeat the install process on all other Domain Controllers in the source. Istallation must be configured manually on all Domain Controllers.
