Philip Kime wrote:
I've been trying to get Windows sync installed but it's going
to be
impossibel as it means enabling password complexity policies in a
large domain and that isn't going to happen. Does anyone know of any
alternatives to this? I know this is desperate since you have to have
the plain-text password in order to do this right?
Right. There are products that get around this issue by not sync'ing
passwords.
Instead they proxy failed bind requests to AD and if the bind succeeds
they come
to the conclusion that the password has changed and store the new value.
It's possible however that someone has a patent on this technique.