Enabling SSL password changes for the Web client:

1. In ISM for each front-end server, create IISADMPWD virtual directory and map it to
drive:/WINNT/System32/inetsrv/iisadmpwd

2. Ensure that IISADMPWD directory has Anonymous Access (other auth types may be selected, but Anonymous must be one of them).

3. Ensure the Metabase setting PasswordChangeFlags is set to 0. *If you change the 1 to 0, then you can only use https://; otherwise either method will work...

cd c:\inetpub\adminscripts
adsutil set w3svc/passwordchangeflags 1

0 - requires password change by SSL
1 - allows password change by non-secure ports
2 - disables password changes
3 - undocumented but disabled
4 - disables advance notification of expiration