Password Sync two domains

Question

Hello @All,

I have a little question about passwords in Adaxes.
I have two domains and I want to sync password from UserA from Domain A to UserA in DomainB, is this possible?

Both domains are managed through Adaxes.

Thanks for every answer :-)
Arne

Comments

Hello Arne,

By default, passwords are stored in Active Directory using irreversible encryption, which means that AD stores only hashes of the passwords, but not the actual passwords. For this reason, it is only possible to retrieve a password when it is set via Adaxes. In other words, it is possible to synchronize a password only when it is changed or reset or when a new user account is created using Adaxes.

For this purpose, you can create Business Rules triggered after

• creating a new user,
• changing the password of a user,
• resetting the password of a user.

The Business Rules will automatically update the password for a similar user account in the other domain.

To help you with the actual Business Rules, can you provide more detail on how are users related between each other in both the domains? Do they have the same username? Maybe, the OU structure is similar, and also their Distinguished Name is similar less the domain name? Can you provide as much detail on this as possible?

---

Hi.

I have the same question. We have two managed domains, with the same sammaccountname on both. What is the exactly configuration/ rule to do the sync using Business Rules? Our intention is to sync every time the users change or reset their passwords through the Adaxes Portal.

Tks!

Answer 1

Hello,

Have a look at the following script from our repository: https://www.adaxes.com/script-repository/reset-user-password-in-resource-domain-s333.htm.