Users cannot change password
From: Hindy (1_at_1.com)
Date: 07/02/03
- Next message: Stefano Peduzzi: "Security on Folder and Files.. should be easy but MS Security is strange!"
- Previous message: Rich: "Clients Cannot Change Password"
- In reply to: Rich Di Bernardi: "Users cannot change password"
- Next in thread: Richard Di Bernardi: "Users cannot change password"
- Reply: Richard Di Bernardi: "Users cannot change password"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 2 Jul 2003 12:08:01 -0700
OK, first of all password policies can only be set at the
domain level. You can set these options on a OU, but they
will only effect the local accounts held on machines
within this OU.
The reason you are getting this message is probably
because you have the minimum password age set to 87 days.
What you are saying with this setting is users can't
change their password for 87 days.
This setting is used to stop users circumventing
your "maintain password history" setting, by rapidly
changing their password so they can reset it back to what
it originally was. Also, having this option set to such a
high number introduces a further secuirty risk because if
a password is compromised the user can't change it until
the 87 days have expired.
Try setting it to a more reasonable figure such as 3
days.
>-----Original Message-----
>We have users receiving a message "this password cannot
be
>changed at this time" when they try to change their
>password in the domain.
>We have the Domain Security Policy set for minimum
>password age of 87 days and the maximum password age set
>for 90 days.
>All users are in a GPO in which we have the same
settings
>on the GPO with no override being applied.
>Also the Everyone group has "Change Password" permission
>in both the GPO and Domain security policy
>.
>
- Next message: Stefano Peduzzi: "Security on Folder and Files.. should be easy but MS Security is strange!"
- Previous message: Rich: "Clients Cannot Change Password"
- In reply to: Rich Di Bernardi: "Users cannot change password"
- Next in thread: Richard Di Bernardi: "Users cannot change password"
- Reply: Richard Di Bernardi: "Users cannot change password"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
