Overview#

There are some setup items required to be able to set the password for Microsoft Active Directory from Java. Microsoft Active Directory uses the UnicodePwd instead of the more common userPassword unless you have Enable UserPassword in Microsoft Active Directory.

Encryption Required#

LDAP encryption is required to change the UnicodePwd for Microsoft Active Directory

All Microsoft Active Directory Domain Controllers automatically enroll for domain controller certificate and utilize it for secure LDAP communications if Active Directory integrated Microsoft Certificate Server is deployed within the AD Forest. As long as you deployed Microsoft Certificate Server in Active Directory integrated mode, then you don't need to do anything else on Microsoft Active Directory, all Domain Controllers will use SSL on port 636.

Changing the Microsoft Active Directory Password#

We have written and borrowed some JNDI Examples on how to change the Microsoft Active Directory password:

• Example - Active Directory Change Password JNDI
• Using LDAPS With JNDI

More Information#

There might be more information for this subject on one of the following:

• Setting and Changing Microsoft Active Directory Passwords