Please Help

From: Ray (anonymous_at_discussions.microsoft.com)
Date: 01/30/04 

Date: Fri, 30 Jan 2004 06:52:06 -0800

Ok this is killing me, Please help. I am running AD on a
windows 2000 server with service pack 4. If a user at
logon gets the message that their password is about to
expire and the "Password Change Notification" message
appears 10 days. then attempts to change their password
after receiving the "Password Change Notification"
message may receive the following error message: You do
not have permission to change your password.
According to Microsoft Knowledge Base Article - 258788
the behavior occurs if the Everyone group has not been
granted the Change Password right on the user object. I
checked and the everyone group does have permission to
change password. This only occurs on XP workstations and
not on the W2K workstations. I have not been able to
find any other information to help with this issue other
then Q258788.

How do I correct this so users can change their password
at logon?

Thanks

Relevant Pages

  • Please Help
    ... logon gets the message that their password is about to ... after receiving the "Password Change Notification" ... not have permission to change your password. ... not on the W2K workstations. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Event ID 529
    ... The source is clear - workstations that are not part of my ... SBS2003 domain share the same local network (it's a shared local network in ... This kind of issue may be caused by Application logon such as while Outlook ... is connecting to Exchange Server, or this is an automated dictionary attack ...
    (microsoft.public.windows.server.sbs)
  • Re: How do manage your workstations?
    ... For the most part these functions require a local administrator rights. ... Therefore I have to logoff the regular user, then I logon as local administrator so I can update programs or add-in devices. ... However, if there are hundreds of workstations involved, it’s really time consuming! ... Maybe there is remote installation system that push program updates to the workstation and that system logons on as domain admin. ...
    (microsoft.public.windowsxp.general)
  • Re: "Lock workstations" after certain idle time. Is it advisable to do it from server side
    ... > business needs, ... > to mitigate the risk of unauthorized access. ... > unlocked terminal or even a logon prompt without a warning can be ... >> workstations idle for a certain period of time. ...
    (microsoft.public.win2000.active_directory)
  • Re: Cant login interactively after domain rename
    ... those workstations, for the policies in the User Rights section ... for Log on locally, and Deny local logon. ... Microsoft MVP (Windows Server System: ...
    (microsoft.public.windows.group_policy)