mprahl/ADReset — reverse-engineered prompt

Build me a self service password reset portal for Active Directory users. I want employees to be able to reset a forgotten password by answering security questions or by getting a reset link sent to the email address on their AD account. They should also be able to change their password when they still know the old one.

Make it mobile friendly and simple, with a clean home page, forms for secret questions, choosing a new password, and changing an existing password. Include an admin web interface where settings can be configured, like AD connection details, allowed security groups, email reset settings, and question setup.

Use PHP on the server side so it can run on a normal web server, and make it work with LDAP or LDAPS for Active Directory. Add basic protections like captcha, secure reset links, validation, and clear error messages. Also include setup notes for running it on Apache or IIS with MySQL.