Display Password Guidelines Text On The Microsoft Exchange Server 2010 Outlook Web App Password Change Page.

[ 1 ] Comment
Share

This article will explain how to add some organisation-specific password guidelines to the OWA 2010 Change Password page.

First, look for the changepassword.aspx file in the C:\Program Files\Microsoft\Exchange Server\v14\ClientAccess\Owa\forms\premium folder. Make a copy of it (important if something goes wrong), and then open it in Notepad. Scroll down until you see the following text:

    <span id="textContainer_usage1">
        <%=LocalizedStrings.GetHtmlEncoded(Strings.IDs.ChangePasswordUsage) %></span><br />
    <span id="textContainer_usage1">
        <%=LocalizedStrings.GetHtmlEncoded(Strings.IDs.ChangePasswordUsage2) %></span><br />

Insert some code between the two existing DIVs so that it looks like this (the guidelines here are my example only):

    <span id="textContainer_usage1">
        <%=LocalizedStrings.GetHtmlEncoded(Strings.IDs.ChangePasswordUsage) %></span><br />
<p>
When you choose a new password,
please make sure that it is at least eight characters long,
that it contains at least one number,
and at least one punctuation character.
</p>
    <span id="textContainer_usage1">
        <%=LocalizedStrings.GetHtmlEncoded(Strings.IDs.ChangePasswordUsage2) %></span><br />

Save the file back, and you should see the extra text the next time you use the Change Password option.

Next, we should add the text to the page you see when you are instructed to change your password after logging on (perhaps because it has expired, or because the administrator has checked the ‘User must change password at next logon’ checkbox in ADUC). Please note that the ChangeExpiredPasswordEnabled registry key must be added to make this page visible in OWA.

Find the expiredpassword.aspx file in the C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\Owa\auth folder. Make a copy as usual, and open it in Notepad. Look for the following text

<tr>
   <td><%=LocalizedStrings.GetHtmlEncoded(Strings.IDs.PasswordExpired) %></td>
 </tr>
 <tr><td><hr></td></tr>

and immediately after it, insert the guideline text (again, this is my example):

<tr><td>
When you choose a new password,
please make sure that it is at least eight characters long,
that it contains at least one number,
and at least one punctuation character.
</td></tr>

Save the file back to disk.

If you want to make a similar change to the Basic client password page, look for the basicoptions.aspx file in the C:\Program Files\Microsoft\Exchange Server\v14\ClientAccess\Owa\forms\basic folder. Look for a line that says

  <%RenderOptionsControl();%>

and immediately after it, insert the following

<%
if(Request.ServerVariables["QUERY_STRING"].IndexOf("ChangePassword") != -1)
{
  Response.Write("When you choose a new password," +
    "please make sure that it is at least eight characters long," +
    "that it contains at least one number," +
    "and at least one punctuation character.");
}
%>

This .aspx page is used for several different functions, and so the code has to check what we are trying to do. Sadly, since most of the output comes from compiled code, it isn’t possible to put the guideline text anywhere better than at the top of the page frame.

As with most of these type of modifications, you will need to check that they still function after each product update. Sometimes your modified file will be replaced by a new one from the update.


One Response to Display Password Guidelines Text On The Microsoft Exchange Server 2010 Outlook Web App Password Change Page.

  1. Robert Tuck says:

    I was looking for instructions on doing this in 2013, and you helped point me in the right direction. See my Technet post for the answer:
    http://social.technet.microsoft.com/Forums/exchange/en-US/645daf0b-e639-434f-8218-b3feef74f5ae/how-can-i-tell-users-what-the-password-complexity-requirements-are-in-owa-2013?forum=exchangesvrclients




Leave a Reply

Your email address will not be published.

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>