Passwords

[Greenback]

Hi,

I recently migrated to w2k and ad.

However, my users are having problems entering new passwords when their old ones have expired.

They just can't change them, whereas I can.

I thought this was because im an admin, but this doesnt appear to be the case.

Help!!

Cheers

GB

 

[brontosaurus]

error message?

 

[Greenback]

Unable to change the password on this account.

c0000be.

please contact blah blah

cheers

gb

 

[brontosaurus]

just a shot, but can you check this registry entry on your DC...
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA

Look for the RestrictAnonymous value. I believe it should be set to "0".

 

[Greenback]

theyre all set to 0

:-(

 

[brontosaurus]

when you say you can change them, do you mean you can reset them via AD users and computers? Can the users change their passwords prior to the expiration, while they're already logged in? Or does this problem only occur when prompted to change at logon?

 

[Greenback]

I can reset them in ADUC, and i can change mine at anytime.

However, when they try to change it, either at expiration or not, it doesnt work

Thanks

gb

 

[koquito]

Did you check if those users have the rights to change their passwords? In AD, do they have checked that particular box (User can/can not change the password..)? A+, MCP, CCNA
marbinpr@hotmail.com

Keep fighting for your knowledge!

 

[Greenback]

Everything looks as it should - it really is odd

Some users are running nt4 workstation - but this shouldnt make any difference should it?

 

[brontosaurus]

Can you try removing the password policies temporarily, reboot a workstation to force the update, and see if it makes any difference?