NT Workstation users cannot change password

[djameson]

Hi, Since we've joined our NT4 workstation machines to our 2000 domain, it is not possible for the users of these NT machines to change their domain password.

They cannot change when prompted to do so nor can they change even if they are logged in and try to change password manually.

The error that comes up is:

"unable to change password on this account (C00000BE) please consult your system administrator"

thanks,

 

[GlenJohnson]

You might want to think about upgrading them to w2k pro. It's a better os, and you shouldn't have these kind of difficulties. Glen A. Johnson
Microsoft Certified Professional
gjohn76351@msn.com
"Divide each difficulty into as many parts as is feasible and necessary to resolve it."
René Descartes (1596-1650); French philosopher

 

[ErikButler]

I would look at the netlogon share and see if there is a ntconfig.pol file there. If not you will need to create on with poledit. NT4 uses system policys and will not read 2000 group policies.
The post before is really a better way but it is a workaround and it does not actually fix your current problem. I understand upgradeing cost money and not every company has deep pockets for IT Staff Thanks
Erik Butler
2000 MCSE
erikbutler@centurytel.net

 

[ama299]

I had this same problem, even had to call microsoft.

What my problem was a Master broswer issue. This prevented two things: Could not join a NT Workstation to the domain, and could not change password (I got the same error you have). I know that you said you joined yours with no problems, but take one computer off of the domain and try to re add it. Anyways the reason why the master browser was messed up was because there was a WINS issue. I would look though WINS on your server and delete any entys like the Auto config 169.somthing or any IP address that are not soppose to be there. If you have two or more w2k server make sure you set them up to push/pull so they both have the same records. WINS is very important when you are running NT workstation just like its important to have DNS for your W2k workstations. Another thing to do is ping your servers by there IP Address and by name.

This should get you started
Thanks

 

[djameson]

thanks - the policy object didn't work sadly. is there anything specific I need to do when creating the policy object? (such as naming, settings, saved location etc) or anything I need to do on the nt wkstn after creating the object?

final (daft) question - can you install dsclient on nt workstations?

cheers

 

[ErikButler]

yes you can install DSclient on the workstations. This will allow then to browse the Global Catalog however they still will not be able to apply GPO and will still need the old NTconfig.pol system policy in the NETLOGON share. Thanks
Erik Butler
2000 MCSE
erikbutler@centurytel.net