How to create a password reset web service in a domain for a user?

Question

IIS

Good afternoon!
Please help me realize my idea :)
Users often forget their passwords and strain the first line of those. support extra work - change the password. I want to help those. support and learn new things.
Actually the idea is this:
If the user has forgotten his password, he clicks on the link in the changed logonUI and a web form opens in which he has 4 fields:
1. Domain \ username
2. TIN
3. New password
4. New password again
Web server ( 2012 p2) is already working with IIS, there is a default form (\Windows\Web\RDWeb\Pages\en-US\password.aspx) that needs to be changed, namely, add the function of checking the user's TIN attribute, if it matches, the password is successful is changing.

Answer 1

you should not make a hole in the system, because the TIN can be trite in the passport, which lies on the table. in the financial department and a bunch of other places.
let support be better disturbed

Answer 2

Users often forget their passwords and strain the first line of those. support

It is better to fight the root) Encourage users to take this matter more seriously, an official piece of paper (security policy) with signatures about familiarizing employees. Make it harder to reset your password. For example, an employee writes an application signed by the head of his department, IT department, etc.
Or alternatively smart cards.