Inside Activate
...
How To Guides
Users are given a certain number of tries to reset their password via the Self Password Reset mechanism.
2 min
this reset try count is common between all forms of password reset web, external web or gina/credential provider how it works 1\ ad has a time stamp 'pwdlastset' that stores the last time a users password was set this is used to enforce min and max password age by ad and if it is '0' then the user will be forced to change their password when they logon this is maintained by ad and will be set whenever the users password is updated, via activate, windows, native tools, anything 2\ activate stores the current pwdlastset and rety count in the database this information is stored in an extendedproperty syspasswordinfo when the user trys to reset their password activate uses this information to either reset the retry count automatically or increase the retry count the following logic is used if user pwdlastset = activate pwdlastset the users password has not changed so increase the retry count else the users password has changed so reset the retry count to zero and let the user attempt to change it