Re: Unauthorized to change password
From: Steven L Umbach (n9rou_at_attbi.com)
Date: 05/30/03
- Next message: Guogang: "Truste Root CA update"
- Previous message: Anonymous: "ntfs--floppy disk"
- In reply to: Terry Bailey: "Unauthorized to change password"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 30 May 2003 18:43:28 GMT
Check user account properties to make sure that "user can not change
password" is not selected If password never expires is selected, then
account policy password age does not apply. Password policy for domain
accounts can only be configured at domain policy level. I have heard of
users also having a problem changing their passwords on XP machines if
security option for domain controllers "additional restrictions for
anonymous connections" is set to no access without explicit anonymous
permissions. See links for a few more issues that may or may not pertain to
your problem, but FYI. --- Steve
http://asia.cnet.com/itmanager/netadmin/0,39006400,39108281,00.htm -- SMB
signing incompatability.
http://support.microsoft.com/?kbid=244474 --- Force Kerberos to use TCP.
"Terry Bailey" <TerryB@grandriverSupply.com> wrote in message
news:OnBKHUsJDHA.1752@TK2MSFTNGP12.phx.gbl...
> Hi all,
>
> I've been out of the network adminstrator position for a while. I now
find
> myself as admin for a small network with XP pro workstations and Win2k DC.
> I ran baseline and and IIS lockdown, all sorts of security updates, and
> somewhere I did something that not only requires everyone to change thier
> passwords, but tells them they are unauthorized to change thier password
> when they try.
>
> I've check the user profiles and the do not have password expiration
> enabled. (I know, bad move)
> I can find nothing in the account policies of the domain security policies
> or domain controller security policies tjat would cause this. Any ideas
> would be helpful. 7 days to lockout and counting.
>
> Also, is there a way to prevent a person or account from being used on two
> computers in the domain at the same time?
>
> Thanks a bunch
>
> TB
> IT Admin
>
>
>
>
- Next message: Guogang: "Truste Root CA update"
- Previous message: Anonymous: "ntfs--floppy disk"
- In reply to: Terry Bailey: "Unauthorized to change password"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|