Re: Access Denied Change password

From: Steven L Umbach (sumbach_at_nospam-ameritech.net)
Date: 12/17/03


Date: Wed, 17 Dec 2003 16:28:01 GMT

This can be caused by a security option on domain controllers for additional
restrictions for anonymous connections being set to no access without
explicit anonymous permissions. You may wan to check that on the Local
Security Policy [effective setting] and Domain Controller Security
olicy. --- Steve

"JLMTL" <anonymous@discussions.microsoft.com> wrote in message
news:0a8301c3c4a9$019c1830$a301280a@phx.gbl...
> We got W2K servers and WXP clients. Latelty, users are
> getting prompts to change password at logon as it will
> expire in X days. When they choose the option to change
> it, they get an access denied message. Once they login,
> they have no problem changing it using the ctrl-alt-del
> way. What's wrong? :(



Relevant Pages

  • Re: User get access denied error when prompted to change password adte Reset
    ... If you enable auditing of account management in the ... Domain Controller Security Policy, you may find useful info in the security ... make sure that the domain controllers do NOT have the ...
    (microsoft.public.win2000.security)
  • Re: Continual errors - Event ID 1030 and 1058 on DC
    ... This article will help you check the security rights on the sysvol ... Domain controllers have the read and apply rights to the Domain ... Controllers Policy. ...
    (microsoft.public.windows.group_policy)
  • Re: Blocking port scans on local network
    ... You can implement enumeration of SAM accounts and shares with probably no ... on domain controllers via Domain Controller Security Policy depending of ... domain computer that has a "require" ipsec policy assigned to it. ... between domain computers and domain controllers as the domain controllers ...
    (microsoft.public.win2000.security)
  • Re: Can not figure out why?
    ... every second on the domain controllers. ... Want some good security information? ... Logon Failure: ... I checked all service and none of service uses administrator account ...
    (microsoft.public.windows.server.active_directory)
  • Re: Audit Admnistrators
    ... You can enable auditing for various categories on domain controllers via ... Domain Controller Security Policy such as for account management, ... and directory services. ...
    (microsoft.public.security)