Re: Cannot change password

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 09/29/04

  • Next message: Jesse Gardner: "What is MOM? (Breif overview please)"
    Date: Wed, 29 Sep 2004 10:49:52 -0500
    
    

    The administrator himself can reset a password in mmc that is the same exact
    password that the user tries to use to change their password via their
    computer? I would make sure you try it yourself on at least two domain
    computers to verify there is no operator error. Does the command net
    accounts show the same maximum password length as the domain policy? Did
    this just start happening and if so were any other configuration changes
    applied to the domain such as security templates or security policy? I would
    also check Event Viewer on the domain controllers looking for any events
    that may indicate a problem and run the support tool netdiag on first the
    pdc fsmo domain controller and then on a domain computer where this is
    happening to see if any failed tests/errors/warnings are reported. Check the
    security logs on the domain controllers for failed events for account
    management [you may need to enable first] to see if they report any helpful
    info. --- Steve

    "Ralf Pelzl" <ralf.pelzl@inf.hs-anhalt.de> wrote in message
    news:%23208krepEHA.3424@TK2MSFTNGP11.phx.gbl...
    > Hello,
    > we have strange problems with our passwords. Here's the scenario:
    > 4 domain controllers with Win2003 and the clients running on Win2000 Sp4.
    > In our domain policy with have password complexity enabled, min password
    > length 6, min password age 0, max password age 0, no password history.
    > There
    > is no problem on the clients to get the policy.
    > Now, if a user try to change his password, there is only the typical
    > message
    > box that means that the password is'nt complex enough. But the password
    > (e.g. 'Abcd-1') match all requirements. Same on administrator. Nobody of
    > our
    > users can change the password on themself. Only administrator can change
    > the
    > passwords via AD-MMC. The password have to match the complexity policy
    > requirements, it can be change but only on the MMC. If you try to change
    > the
    > same password on a client it wont work. Where is the problem ?
    >
    > Sincerely
    > Ralf
    >
    >


  • Next message: Jesse Gardner: "What is MOM? (Breif overview please)"

    Relevant Pages

    • Re: Problems with opening MMC Console
      ... > While logged into the machine as an Administrator, ... > Policy Objects sub key. ... > Unsolicited e-mail is not answered. ... >> Someone had played around with the MMC Settings. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Problems with opening MMC Console
      ... But I cannot even get into regedit when I type it in Start/Run while I'm ... While logged into the machine as an Administrator, ... Policy Objects sub key. ... > Someone had played around with the MMC Settings. ...
      (microsoft.public.windowsxp.security_admin)
    • Cannot change password
      ... In our domain policy with have password complexity enabled, ... length 6, min password age 0, max password age 0, no password history. ... Same on administrator. ...
      (microsoft.public.windows.server.general)
    • Cannot change password
      ... In our domain policy with have password complexity enabled, ... length 6, min password age 0, max password age 0, no password history. ... Same on administrator. ...
      (microsoft.public.windows.server.security)
    • Re: Problems with opening MMC Console
      ... allow you to do this from outside of Windows, ... > While logged into the machine as an Administrator, ... > Policy Objects sub key. ... >> Someone had played around with the MMC Settings. ...
      (microsoft.public.windowsxp.security_admin)