Enabling Password Reset in MDM
2/9/2009
Password reset in Microsoft System Center Mobile Device Manager (MDM) 2008 Service Pack 1 enables a user who has forgotten his or her Windows Mobile device password to reset the password. To reset the device password, the user enters a one-time recovery password on the device. The recovery password is a 20-character numeric string that, when entered on the device, enables the user to reset the device password.
Note
Password reset is supported on Windows Mobile devices, starting with version 6.1.4. To use the feature, you must install a .cab file on the Windows Mobile device as well as enable the feature by using the Group Policy setting that follows. MDM Password Reset Client, which is part of the MDM Resource Kit Tools, provides the .cab file that you install on Windows Mobile devices so that users can use the password reset feature in MDM. More information about installing the .cab file is included in the guide that is packaged with the tool download. To download the tool, see MDM Password Reset Client at this Microsoft Web page: https://go.microsoft.com/fwlink/?LinkID=127030.
In MDM 2008 SP1, you enable password reset by updating the User Reset of Password Group Policy setting.
To enable password reset in MDM
In the Group Policy Management Console, expand Group Policy Objects, and then locate the target Group Policy object (GPO).
Right-click the GPO, and then select Edit.
In the Group Policy Object Editor dialog box, expand Computer Configuration\Administrative Templates\Windows Mobile Settings.
Choose Password Policies.
In the details pane, right-click User Reset of Password, and then choose Properties.
In the User Reset of Password Properties dialog box, on the Setting tab, choose Enabled.
From the Password Reset list select using MDM Server.
Choose OK to close the dialog box.