Exchange Server

Enable Password Changing through OWA in Exchange 2003

Can I enable user password changes through Outlook Web Access (OWA) in Exchange 2003?

Yes, although this behavior is not enabled by default.

In order to do so you must first configure your server to use SSL.

Sponsored Content

Passwords Haven’t Disappeared Yet

123456. Qwerty. Iloveyou. No, these are not exercises for people who are brand new to typing. Shockingly, they are among the most common passwords that end users choose in 2021. Research has found that the average business user must manually type out, or copy/paste, the credentials to 154 websites per month. We repeatedly got one question that surprised us: “Why would I ever trust a third party with control of my network?

Then, you need to create a new Virtual Directory called Iisadmpwd under the Default Web Site.

  1. Open Internet Information Services Manager from the Administrative Tools.
  2. In IIS Manager expand SERVERNAME (Where SERVERNAME is your server name object), expand Web Sites, and then expand Default Web Site.
  3. Right-click Default Web site and choose New, then select Virtual Directory.

  1. In the Welcome screen click Next.

  1. In the Virtual Directory Alias window type Iisadmpwd. Click Next.

  1. In the Website Content Directory screen navigate to %Systemroot%\System32\Inetsrv\Iisadmpwd. Click Next.

  1. In the Virtual Directory Access Permissions grant Read, Run Scripts and Execute permissions. Click Next.

  1. Click Finish.
  2. See that the new Virtual Directory is listed in the folder list on the right-pane of the IIS Admin console.

Next, you need to enable the Change Password button in the Registry of the server.

Note: This article was written at a time when there was no other method of performing the above. Nowadays we can use a nice graphic tool called OWAADMIN to perform the same trick (and many others). However even with OWAADMIN you will still need to perform parts of the steps outlined on this current page. The only step you can skip is the following step:

  1. Open Regedit.
  2. Navigate to
  1. Create a new REG-DWORD value with the name of “DisablePassword” (without the quotes) and give it the value of 0 (zero).
  2. Restart the IIS Services (you can do it from the IIS Admin tool).

Now check to see if the Change Password option is available in OWA:

  1. Open OWA in a web browser (remember, you’re using SSL now, so it has to start with HTTPS://).
  2. Logon with your username and password.
  3. Click on the Options button.
  4. In the Options window scroll all the way down. Notice the Change Password button.

Click it.

  1. Notice the Change Password window opening. Try to use it.

Reader notes: Reader Brett Watkins wrote:

Hi Daniel, Excellent article on changing your password through Windows 2003 OWA.

Just a tip, we have a front end server and 7 back end servers. For this to work correctly in this configuration, your procedure should be followed on the front end server only. Then, the backend servers only require the DisablePassword registry change to be done.

I thought that would be a useful addition to the article.

Indeed. Thanks Brett!

Another reader note: Reader Rob Fisher says:

In the link above, I found a step you missed.

You also have to go into the iisadmpwd virtual folder properties, select configure in the application settings area of the virtual directory tab, and remove the davex.dll. You may get a 501 error if you dont do this. Thanks for the help!

Thanks Rob!

Yet another reader note: Reader Eric Bridie says:

First I want to thank you for the brilliant articles. I just have an extra comment regarding password changes in OWA.

My environment is a Windows 2003 SBS SP2 R2 Enterprise. To get the OWA password change working I needed to change a firewall rule. The change is: Add the Iisadmpwd directory to the SBS OWA Publishing Rule. Hope other people can use this info.

Thanks Eric!

Related articles

You may find these related articles of interest to you:

Related Topics:


Don't have a login but want to join the conversation? Sign up for a Petri Account

Comments (1)

One response to “Enable Password Changing through OWA in Exchange 2003”

Leave a Reply

Don't leave your business open to attack! Come learn how to protect your AD in this FREE masterclass!REGISTER NOW - Thursday, December 2, 2021 @ 1 pm ET

Active Directory (AD) is leveraged by over 90% of enterprises worldwide as the authentication and authorization hub of their IT infrastructure—but its inherent complexity leaves it prone to misconfigurations that can allow attackers to slip into your network and wreak havoc. 

Join this session with Microsoft MVP and MCT Sander Berkouwer, who will explore:

  • Whether you should upgrade your domain controllers to Windows Server
    2019 and beyond
  • Achieving mission impossible: updating DCs within 48 hours
  • How to disable legacy protocols and outdated compatibility options in
    Active Directory

Sponsored by: