Re: PSWD CHNGE IN 2000 AD

From: mike (mike_at_ih1.com)
Date: 04/29/03


Date: Tue, 29 Apr 2003 14:00:13 -0700


sounds like someone set the "high" security template
during install or after. Change the setting back to "1".
Use Q246261 for reference
>-----Original Message-----
> There was a poster here a while back who resolved
the problem for XP
>Pro machines by backing down the "additional restrictions
for anonoymous
>users" setting in security policies for the domain. The
most resticitve
>setting "no access without explicit anonymous
permissions" was causing the
>problem. --- Steve
>
>
>"CasDeTroy" <trypplex@msn.com> wrote in message
>news:049d01c30e68$87a4ad90$3301280a@phx.gbl...
>> I have up until now been running a 400 node Win2k
>> network, I had to add some Win XP PRO wkstns, my problem
>> now is only with the Win XP PRo users.
>>
>> The Win xp pro users cannot change their passwords.
>>
>> I realise the domain security policy had under LOCAL
>> SECURITY..Prevent system maintenance of passwords...
>>
>> Although I disabled this..I still have it showing
enabled
>> on the wkstns even after several restarts of the DC &
>> Wkstns.
>>
>> Is this the cause, if it is how do I solve this problem
>> Or if this isn't the cause can you please help me out?
>>
>> Thx
>>
>
>
>.
>



Relevant Pages

  • Policy changes are not recognized
    ... settings under "Computer Configuration | Windows Settings | Security Settings ... member of a "Domain Static Authentication" security group that I created. ... The "Default Domain Security Policy" is the second of two GP's at the Domain ...
    (microsoft.public.windows.group_policy)
  • Re: Security Groups
    ... Access this computer from the network. ... You may also want to check security options in the same domain security policy and see if any restrictions exist? ... domain when they are in a security group. ...
    (microsoft.public.windows.server.sbs)
  • Remaining SIDs left behind after account deletion
    ... In the Domain Security Policy Settings I have some SIDs remaining that are ... from an account being deleted from the domain but I am not positive. ...
    (Focus-Microsoft)
  • Re: Password rotation
    ... thats what that article said as well. ... It will effect your security in that users could rapidly ... >> characters and an old one cannot be used again. ... >> This is the domain security policy ...
    (microsoft.public.win2000.security)
  • Re: XP machines lockout user accounts when security log is full.
    ... There is a security policy setting that is supposed to prevent that. ... it in Domain Security Policy or at the OU level. ... policies/security options - shut down system immediately in unable to audit security ...
    (microsoft.public.win2000.security)