Re: Please Help

From: Steven L Umbach (sumbach_at_nospam-ameritech.net)
Date: 01/30/04


Date: Fri, 30 Jan 2004 21:21:49 GMT

On your domain controllers Local Security Policy and the Domain Controller
Security Policy be sure the security option for additional restrictions for
anoymous connections is not set to no access without explicit anonymous
connections as it is a known problem for XP clients in a W2K domain. If you
do find out it is enabled, change it and run secedit /refreshpolicy
machine_policy /enforce on the domain controller where you make the
hange. --- Steve

"Ray" <anonymous@discussions.microsoft.com> wrote in message
news:771201c3e740$a0f35290$a601280a@phx.gbl...
> Ok this is killing me, Please help. I am running AD on a
> windows 2000 server with service pack 4. If a user at
> logon gets the message that their password is about to
> expire and the "Password Change Notification" message
> appears 10 days. then attempts to change their password
> after receiving the "Password Change Notification"
> message may receive the following error message: You do
> not have permission to change your password.
> According to Microsoft Knowledge Base Article - 258788
> the behavior occurs if the Everyone group has not been
> granted the Change Password right on the user object. I
> checked and the everyone group does have permission to
> change password. This only occurs on XP workstations and
> not on the W2K workstations. I have not been able to
> find any other information to help with this issue other
> then Q258788.
>
> How do I correct this so users can change their password
> at logon?
>
> Thanks
>



Relevant Pages

  • Re: Local Security Policy on a DC
    ... You mentioned "The Domain Controller Security Policy does ... the user right assignment for "add workstations to the ... >assignments defined, ...
    (microsoft.public.win2000.security)
  • Re: Local Security Policy on a DC
    ... is defined in Domain Controller Security Policy as I mentioned so apparently ... domain controller during the process and that is just a guess. ... > the user right assignment for "add workstations to the ... >>assignments defined, ...
    (microsoft.public.win2000.security)
  • Re: Domain users unable to change password
    ... As I indicated, if the user logs onto the domain using an ICA or RDP client, ... I did notice that the Security Policy Setting for "Additional restrictions ... > Check their user accounts in AD Users and Computer to make sure that they ... > 2003 domain controller try running the Resultant Set of Policy mmc snapin ...
    (microsoft.public.windows.group_policy)
  • Re: issue accessing an AD server
    ... You can reset local security settings to default defined levels as described ... However on a domain controller, ... Security Policy will override user rights assignments. ... > restore the server from tape. ...
    (microsoft.public.win2000.security)
  • Re: File/print sharing between 98/XP/2003 Mixed Domain
    ... the other on how to enable ntlmv2 on a W98 computer. ... In addition for the mean time in both Domain Security Policy and Domain Controller ... > several Windows 98SE clients that have shared printers. ...
    (microsoft.public.win2000.networking)