Re: "You are not allowed to change your password"

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 07/15/04 

Date: Thu, 15 Jul 2004 18:07:00 GMT

I have seen that for AD users but never a local computer. For AD users it usually is
a result of not having everyone permissions for change password to the users account.
I can not think of anything else offhand other than try enabling auditing of account
management on that computer and see if anything is generated in the security log in
Event Viewer. --- Steve

"Jim Becker" <jbecker@ui.urban.org> wrote in message
news:c113b52c.0407150659.6debd6e0@posting.google.com...
> "Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
news:<HyiJc.91609$XM6.62992@attbi_s53>...
> > Is the option for the user account on the server for "user can not change
password"
> > disabled/unchecked? net user username should also show that info. --- Steve
>
> It's not checked. The only checked item is "user must change password
> at next logon." If that's checked, the user is told he doesn't have
> permission to change the password. If it's unchecked, the user can log
> in and change his password manually.
>
> We've reproduced this for multiple accounts, in and not in the
> Administrators group.
>
> Jim Becker

Relevant Pages

  • Re: FileUpload control unable to write to network drives
    ... The page is working fine when I upload files and save them into my local computer, but fails when the files are to be saved to a network drive. ... I believe this is permission issue, the account on my local computer does not have permissions to write to network drive. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: I need some HELP
    ... So it is just a standard permissions issue. ... and NTFS permissions work together and you must figure out which part is ... >>The account in question has read only access to network ... >>am using this login on my local computer. ...
    (microsoft.public.windows.server.general)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied access. ... I then added full permissions to my user account on both of these keys, ... local admin rights to the server hosting incoming email. ... what permission I need to give the app pool locally to avoid this issue. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied ... I then added full permissions to my user account on both of these keys, ... that's for every app pool you create for every new web app on the ... local admin rights to the server hosting incoming email. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Win2k - Account Operator not working properly
    ... You very likely have other ACL issues other than what was mentioned and I can point them out here for you for free or you can pay someone $200-500 an hour to come check it out. ... In order for that to result in inheritence protection it means the schema had to be modified. ... set the account in the GUI to inherit from its parents. ... Used the delegation wizard, on the top level OU, to assign the desired permissions. ...
    (microsoft.public.windows.server.active_directory)