Re: "You do not have permission to change your password" only when expired

I would not think so for XP SP2 but you certaily can try it. I suggest that
you also post in the Active_directory newsgroup to see if anyone there can
help. The other thing you might try is to enable auditing of directory
access for failure only [even if just temporarily] in Domain Controller
Security Policy and then audit the root domain container and the container
that contains the users for full control [if it does not inherit auditing
from the domain container] for user objects only for everyone, anonymous,
and self to see if anything is then found in the security logs of the domain
controllers next time it happens.

Steve


"22of3" <koolism@xxxxxxxxx> wrote in message
news:1156398478.564542.154240@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

I checked and the Everyone group already has the access as detailed in
those two MS articles. (Ability to change password on all user and
computer objects). So no luck there.

Since EveryoneIncludesAnonymous is set to 0 (on the domain controllers)
could that be what the problem is? Would I need to give "Anonymous
Logon" the rights to change password to get around the need for setting
EveryoneIncludesAnonymous to 1?

thanks again



.

Relevant Pages

  • Re: Domain users unable to change password
    ... are not configured to not allow user to change password in account ... I can't think of a Group Policy setting offhand but if you have a Windows ... 2003 domain controller try running the Resultant Set of Policy mmc snapin in ... connectivity, replication, and secure channel/computer account integrity. ...
    (microsoft.public.windows.group_policy)
  • User Password at next logon
    ... I have a windows 2000 domain controller. ... the option of "User must change password at the next logon". ... I tried to login from a windows 2003 server to the doiman controller and to ...
    (microsoft.public.exchange2000.clients)
  • User Password at next logon
    ... I have a windows 2000 domain controller. ... the option of "User must change password at the next logon". ... I tried to login from a windows 2003 server to the doiman controller and to ...
    (microsoft.public.windows.group_policy)
  • Re: prompt user to change password before expiration
    ... on the domain controller to see if it helps. ... > prompted to change their password before expiration date. ... > Now all of sudden the system doesn't prompt them any more. ... > I checked the setting (prompt user to change password ...
    (microsoft.public.win2000.security)
  • Re: User Password at next logon
    ... > I have a windows 2000 domain controller. ... > option I could login to the system with the old assigned password. ... You haven't also selected "user cannot change password" or "password never ...
    (microsoft.public.exchange2000.clients)