Windows logon problem

[dietergw]

Hi


We ae running a windows 2000 domain. Ive got a problem where users log on and are told that their password will expire in 14 days (for example). When they try and change their passwords they are told they dont have permission to do so.

However if they are logged in they can change their password. Ive given the everyone group change password permissions as mentioned in KB258788.

Users still cannot change password without being logged on. Any ideas?

"Extreme situations demand extreme responses."

 

[aftertaf]

You might have a problem with the DC that holds the role of PDC emulator.....

i can't tell you if this is creating the problem with password changes when not logged on as opposed to logged on....
because i don't know!!

Aftertaf (david)
MCSA 2003

 

[dietergw]

Thanks but it seems the problem is specifically Windows XP machines. Will try SP2 to see if it sorts the problem.

Dieter

"Extreme situations demand extreme responses."

 

[Stevehewitt]

I had exactly the same problem. After months of investigation I spoke to Microsoft who confirmed that this is a problem after you have used the MSBA software on your server with XP / XPSP1 clients. Like yourself, other client (Win2k etc) worked fine.
They gave me a FTP link to a beta hotfix that worked fine.

Apparently this is fixed in SP2, however we replaced the server before SP2 was released so I can't confirm.

Good Luck,

Steve.

 

[dietergw]

Excuse my ignorance but i dont even know what MSBA is?

"Extreme situations demand extreme responses."

 

[aftertaf]

i think he meant mbsa
microsft baseline security analyzer

checks for patches and updates, in a nutshell.

Aftertaf

getting quite good at sorting out Windows problems...
An expert when it comes to crashing Linux distributions (mdk, debian - nothing withstands me)