Re: password changes

From: Dmitry Korolyov (d__k_at_nospamformorons.mail.ru)
Date: 09/10/03 

Date: Wed, 10 Sep 2003 20:34:00 +0400

This derives from "Users mus log on in order to change password" setting in
WinNT 4.0

In other words, an authenticated session is required to change password.
When user logs on to the computer, it is not authenticated yet - and
therefore gets access denied error when he tries to change password. When
user is logged on already, he can change password - because he it already
authenticated by the system

I believe this can be fixed by granting Change Password to Everyone - for
the entire domain. Note that this does not mean everyone will be able to
change password for every user! You can look for MS KB articles regarging
this problem:

Cannot Change Password in Windows Without Logging on to Domain
http://support.microsoft.com/default.aspx?scid=kb;EN-US;258788
Granting Change Password Permissions to the Everyone Group
http://support.microsoft.com/default.aspx?scid=kb;en-us;242795

"Barry" <bmitchell@ukeu.com> wrote in message
news:619e01c37792$da847430$a501280a@phx.gbl...
> We are running Win2k, AD and have some problems changing
> passwords. Scenario. User logs on and is prompted to
> change password as it is due to expire in x number of
> days. Confirm password change, enter new password
> and 'Permission denied' error pops up. Login with current
> password OK. User then does CTRL,ALT+DEL changes password
> OK.
> Anyone seen this behaviour. I can not find any info
>
>

Relevant Pages

  • Web User Authentication
    ... change password at next logon" and have this work as ... When a Web user logs into the server ...
    (microsoft.public.win2000.security)
  • "User must change password" doesnt happen immediately.
    ... that user will be prompted to change password on the next logon. ... user was not immediately prompted to change password when he logs on. ... happen immediately and not on the second logon attempt? ...
    (microsoft.public.windows.server.security)
  • "User must change password" doesnt happen immediately.
    ... that user will be prompted to change password on the next logon. ... user was not immediately prompted to change password when he logs on. ... happen immediately and not on the second logon attempt? ...
    (microsoft.public.windows.server.security)
  • Re: OWA 2007 Force Password Change
    ... I'm not having problems changing the ... Implementing the Change Password feature with Outlook Web Access ... Also you have to allow Active Server Pages under the Web Service Extensions, ... it's disabled by default in IIS 6.0. ...
    (microsoft.public.exchange.admin)
Quantcast