Re: "You do not have permission to change your password" only when expired

The information below says it is for Windows 2000 domain but you may also
want to check it out for your domain in that "everyone" needs change
password permission for user accounts.

http://support.microsoft.com/?id=242795

The Everyone group has Change Password permissions on all computer and user
objects so that unauthenticated or "anonymous" users or computers are able
to change their passwords when they expire without having to be
authenticated first. If the anonymous user is denied the ability to change
passwords, the user would be unable to change the password without logging
on. The Access Control List (ACL) editor can be used to revoke this
permission, but use this editor with caution.

For additional information, click the article number below to view the
article in the Microsoft Knowledge Base:
258788 (http://support.microsoft.com/kb/258788/EN-US/) Cannot Change
Password in Windows Without Logging on to Domain

"22of3" <koolism@xxxxxxxxx> wrote in message
news:1156227264.136666.165620@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

Users in our Windows 2003 AD domain (upgraded from NT4) that wait until
their password has expired before changing it receive the error "You do
not have permission to change your password" when they are forced to
change it. Users can change their password fine any day up until it has
actually expired.

We have restrictanonymous and restrictanonymoussam both set to 1 on the
domain controllers.

Any help would be appreciated. (Most posts I have read detail the
opposite of the above problem e.g. can not change password until it has
expired.)



.

Relevant Pages

  • Re: When ADMIN PASSWORD has expired - stop ability to bypass chang
    ... 885119 How to set account lockout policies in Windows 2000 and Windows ... expire. ... > unless I change the ADMINISTRATOR Password when it has expired? ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: "Your password will expire in _ days" but what password?
    ... Windows XP is set up with passwords which will expire after 42 ... Select the Advanced tab in the User Accounts window ...
    (microsoft.public.windowsxp.basics)
  • RE: 12,216 Occurrences of event ID 537 , all password has to be reset
    ... because all user passwords have expired. ... the user account password will expire after 40 days. ... Windows Prompts You to Change Your Password Every Time You Log On ... PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were ...
    (microsoft.public.windows.server.sbs)
  • Re: logging in to windows
    ... If you have XP Pro on your computer, at the log in screen type ... Once Windows starts loading, you've missed it and will have ... Windows XP is set up with passwords which will expire after 42 ... Select the Advanced tab in the User Accounts window ...
    (microsoft.public.windowsxp.accessibility)
  • Re: remove experation date from password
    ... Windows XP may notify you at log-on that your password will expire in a ... Policy applet. ... your passwords will never expire. ... My wife never has ...
    (microsoft.public.windowsxp.general)