| Feature |
Description |
NetWrix Password Manager |
Quest Password Manager |
SpecOps Password Reset |
| Core Features |
| Logon Prompt Extension |
Allows to reset password right on the logon screen, without having access to web browser |
Yes |
No |
Yes |
| Disconnected mode of operation |
Allows remote users who don't have access to domain at logon time to reset password after answering verification questions |
Yes |
Yes |
No |
| Enable user to unlock account |
Users can unlock their own accounts after successful answering the identity verification questions |
Yes |
Yes |
Yes |
| 100% Microsoft Infrastructure compatibility |
Uses Microsoft IIS Server |
Yes |
Yes |
Yes, but SSL-only configuration |
| Preload existing profiles enrollment data |
The system administrator enrolls users from a list based on existing verification data (taken, for example from an HR database) |
Yes |
No |
No |
| User email notification feature |
Sends users e-mail notifications when specific events occur that have to do with the state of their accounts, passwords and enrollment status |
Yes |
Yes |
Yes |
| Admin notification feature |
Sends admins e-mail notifications when specific events occur that have to do with state of accounts, passwords and enrollment status |
Yes |
Yes |
Yes |
| Google accounts integration feature |
Users may now handle their Google Apps accounts with the same ease as their domain accounts |
Yes |
No |
No |
| Force password change |
Forces the user to change passwords at the next logon |
Yes |
Yes |
No |
| Password never expires |
Enables admins to set passwords that never expire |
Yes |
No |
No |
| Additional Considerations |
| Self-service web-based password change |
Enables non-Windows or VPN-based users to change their passwords via a web-browser |
Yes |
Yes |
Yes |
| Password expiration notifications |
Users are notified about pending password expirations. This feature also allows embedding a link in the e-mail notification that takes users to the password reset page |
Yes, via Password Expiration Notifier |
Yes |
Yes, with Specops Password Notification |
| Web Server in DMZ feature |
As an additional security measure, some organizations may want to separate the Internet-facing Web Application from the Password Manager Service working with Active Directory domain accounts and passwords, and acting as a backend for the web-interface. This measure decreases the potential attack surface and improves overall security |
Yes |
No |
Yes |
| Customer Branding for the Self-Service Portal |
This option allows customizing the appearance of the Self-Service Portal and personalizing its interface by adding company-specific information (such as company logo, support information and link to a web-page containing password policies) |
Yes |
Yes |
No |
| Batch Removal |
This option allows removing users from the Accounts list in the help-desk portal by importing account data from a plain text file |
Yes |
No |
No |
| Additional e-mail authentication |
This feature allows strengthening the password reset policy by adding an additional verification step: a link for password reset is e-mailed to the user |
Yes |
No |
No |
Copyright notice: NetWrix and Password Manager are trademarks of NetWrix Corporation and/or one or more of its subsidiaries and may be registered in the U.S. Patent and Trademark Office and in other countries. All other trademarks and registered trademarks are the property of their respective owners.
