Re: "You do not have permission to change your password" only when expired

Well that kills my thought.

I would say you will probably end up breaking down to network traces and trying to work out exactly what is happening or possibly calling MSFT and opening a ticket.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


22of3 wrote:
pwdProperties: 0

I will trawl the event logs on the DC's to see if I can get some more
info on the error and test auditing the events that you have suggested.

cheers

.

Relevant Pages

  • Re: Reset Pasword User
    ... You have to have AD auditing enabled and then you will need to scrape your event logs to look for the change events. ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Allow one user account to have access to domain controller event logs?
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ... Tomasz Onyszko wrote: ... event logs without adding the user to Administrators group? ...
    (microsoft.public.windows.server.active_directory)