password

From: MrRogers (dlogan81_at_hotmail.com)
Date: 07/31/03 

Date: Thu, 31 Jul 2003 06:37:40 -0700

I have a question regarding changing passwords upon
logon. Current system in use are w2k servers and all
the machines that log onto the domain are w2k
professional boxes. There were a few computers upgraded
with winXP.
With that roll out of xp, any user accounts that are
created or previously existed that had the "change
password upon first logon" checkbox enabled weren't able
to logon. The initial logon worked and stated that the
password was expired and needed to be reset. After
entering the new passwords (which fit the minimum
password complexity requirement) resulted in a error
that read "You do not have permissions to change the
password." Yet the user and the ou that the user belong
to had permissions to change password that was
propogated down from the root. The two permissions were
self -->
change password(enabled), everyone --> change password
(enabled).
        Here is the twist....if the user were to
logon to a w2k professional box the new password would
be accepted and the user would be logged on. Then I
enabled
the checkbox with "change password upon next logon for a
domain admin,
and it still gave the same error, but on the 2k pro box
it worked.

--the default permissions are as follows:
http://www.windowsitlibrary.com/content/667/04/files/table
4_32.gif
  based on default permissions.

I could not find any documentation of this, if anyone ran
into this
or has any suggestions please reply.
Thanks in advance.
Dave

Relevant Pages

  • passwords
    ... professional boxes. ... password upon first logon" checkbox enabled weren't able ... that read "You do not have permissions to change the ... change password(enabled), everyone --> change password ...
    (microsoft.public.windowsxp.security_admin)
  • passwords
    ... professional boxes. ... password upon first logon" checkbox enabled weren't able ... that read "You do not have permissions to change the ... change password(enabled), everyone --> change password ...
    (microsoft.public.win2000.security)
  • RE: No password expiration message/Cant change password
    ... Default Domain Policy: Local policies-security options: All that shows ... Policy: Network Security: Force logoff when logon hours expire. ... At first I get a Must Change Password notice, Click Change Password, get ... > Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Force PW change with notice
    ... Domain accounts and a very large number of mobile users. ... > 'Change password at next logon is no good' as it doesn't provide enough ... Hi Navigato, ... cant "logon using dial up networking") when the password expires they cannot ...
    (microsoft.public.security)
  • Re: Set "Password never expires" on users in a specific OU?
    ... You should not assign values directly to the userAccountControl attribute. ... user must change it the next time they logon on. ... ' Check if user must change password at next logon. ... I pieced this together from some other scripts I have.... ...
    (microsoft.public.scripting.vbscript)