If you receive an error message that says “Access Denied” for iiQ’s Password assistance app. This means that the user account that is being used to reset the password does not have sufficient access.
Please first check if the username and password are correct in AD. Also, check that only the password is encrypted and that the user has the correct permissions within AD. Please see the instructions below on setting the correct permissions within AD.
In Active Directory Users & Computers, create a service account user
(ex: iiQ.Passwords)In Active Directory Users & Computers, make sure View > Advanced Features is enabled
Right-click on the root of the domain, choose “Delegate of Control Wizard”
Add in your service account
Delegate the following common tasks: “Reset user passwords and force password change at next logon.” Then select next > finish.
Right-click on the root of the domain again, choose “Delegate of Control Wizard”
This time select “Create a custom task to delegate”
Only the following objects are in the folder: User objects
Then check “Property-specific” only.
And check “Read lockout Time” and “Write lockout Time”
If you are still experiencing any issues, please contact our support team.
---
Hannah Bailey - Director, Customer Engagement