Layton ServiceDesk - Workarounds - Global Reset User Password

Back to Contents

Overview

There is currently no way to define a default password for end-user accounts. It is hard-coded as mib. It is possible to reset all the end-user passwords to a different string or even blank.

The technique is to run queries in SQL Server Management Studio. Back up your database prior to running any queries.

Queries

Change All Passwords to the Same String

This technique will change all end-user passwords to one of your choosing. Passwords are stored as hashed values. We get the hashed value by manually changing a password in the Layton ServiceDesk interface to get a known value.

1. Log into Layton ServiceDesk as an administrator.

2. Change the password of an end user to the desired string. Note the username.

3. Open SQL Server Management Studio.

4. Run this query to get the hashed value of the password. Substitute the end user username for ENDUSERNAME:

   SELECT sys_euserpwd
   
   FROM euser
   
   WHERE sys_username = 'ENDUSERNAME'

5. Copy the hashed password value and enter it in place of NEWSTRING below.

   UPDATE euser
   
   SET sys_euserpwd = NEWSTRING

6. Note there are no apostrophes around the password string. For the password mib, this would be:

   UPDATE euser
   
   SET sys_euserpwd = 0x02000C6AB1C7516CCA217091568413FD0581432EB5E1FC22538C5979C247820311FDF276B9FE772F47F7F5470B23C1495DF3E35966D6709CC9AE4490376AE407297D0151F27D

Delete All Passwords

Use this query to delete all the passwords (password will be blank):

   UPDATE euser
   
   SET sys_euserpwd = NULL

Limitations

While this technique is an effective way to change all passwords in one operation, new accounts will still be assigned the default mib. You would have to run the query again from time to time. A SQL trigger could be devised to run it on a schedule or change the password immediately on creation of a new account. These advanced techniques are beyond the scope of this article and the responsibility of the database administrator should development of such a mechanism be conducted.

Feature Request

A feature request to add a setting to allow for a default end-user password has been lodged. No estimate can be given as to when such a feature might become available.

Back to Contents