Re: Repost Re: "You do not have permission to change your password"

From: Alex Johnsen (jaj_at_markus.no)
Date: 06/10/03


Date: Tue, 10 Jun 2003 04:17:32 -0700


Hi, I have the same problem. I've tried the articles
described below with out any success. Please keep me
informed if you should find an answer to our problem.

Regards,

Alex Johnsen
jaj@markus.no

>-----Original Message-----
>> What do you have set for "Additional restrictions for
anonymous
>> connections"? If you relax this (RestrictAnonymous)
setting does the
>> behavior change?
>
>It's set to "None" or "Undefined" in all the group
policies. In the
>Registry, RestrictAnonymous = 0.
>
>
>
>>
>> Matt Scarborough 2003-05-06
>>
>> On Sat, 3 May 2003 18:22:35 -0400, Michael A.
Covington wrote
>> <#$KjAKcEDHA.1548@TK2MSFTNGP12.phx.gbl>
>> > Reposting to bring in more newsgroups, in the hope
that someone will
>know!
>> > "Michael A. Covington"
<Michael@CovingtonInnovations.com> wrote in
>> message news:ekrO%23r2DDHA.2288@TK2MSFTNGP12.phx.gbl...
>> > We have a Windows 2000 roaming user profiles
network and we are
>starting
>> to add some Windows XP client machines. For the most
part, everything is
>> going very smoothly.
>> >
>> > However, we do have one problem.
>> >
>> > When we set up new accounts, they have a default
password and are
>> required to change their password immediately.
>> >
>> > And if the owner of a new account happens to log
in on a XP client
>> rather than a Windows 2000 client, he can't do that.
He is prompted for
>the
>> original password; gives it; is told "You must change
your password" or
>> words to that effect; is prompted for a new password;
and is told, "You do
>> not have permission to change your password."
Frustration!
>> >
>> > This is only because he's trying to change his
password before his
>first
>> complete login. If I let him log in (by resetting his
password for him),
>> then he can change his password just fine.
>> >
>> > Clearly, it's a permission issue. But it's *not*
the permissions
>issues
>> described in:
>> >
>> > http://www.mike-tech.com/article.php?
gif=win2k&article=165
>> >
>> > http://www.jsiinc.com/SUBE/tip2300/rh2367.htm
>> >
>> > We have *not* added any restrictions to remote
access. Thus, as far
>as
>> I can tell, this is *not* the problem described in
>> >
>> >
>>
>http://www.der-
keiler.de/Newsgroups/microsoft.public.win2000.security/200
2-06/2382.html
>> >
>> > either.
>> >
>> > What else could it be? How can I definitively
check that the right
>> permissions exist, and correct them if they need
correcting?
>> >
>> > Note that new-account-holders using Windows 2000
client machines are
>> unaffected.
>> >
>> >
>> > Thanks!
>> >
>> >
>>
>
>
>.
>



Relevant Pages

  • Re: Repost Re: "You do not have permission to change your password"
    ... change password permission doest not help. ... >> to add some Windows XP client machines. ... >> rather than a Windows 2000 client, ... >> permissions exist, and correct them if they need ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Manage Internet Routing
    ... On the client machines at TCP configuration Gateway I have added the ... Windows 2003 will not be able tocontrol what you want to do without ... Infinite Diversities in Infinite Combinations ...
    (microsoft.public.windows.server.networking)
  • "You do not have permission to change your password"
    ... We have a Windows 2000 roaming user profiles network and we are starting to add some Windows XP client machines. ... How can I definitively check that the right permissions exist, and correct them if they need correcting? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: COM and Windows control on webpage
    ... if your client machines are all running ... Windows XP, you may be able to take advantage of registration-free COM ... from an IE-hosted winforms control). ... >I have a windows control dll in my root folder and embedded it on a webpage ...
    (microsoft.public.dotnet.security)
  • NT4 domain and W2K3 Domain on same lan (no interaction required)
    ... >subnet range at a remote site. ... >The NT4 Domain will have no interaction with the Windows ... >Client machines will log into one of the 2 domains only, ...
    (microsoft.public.windows.server.active_directory)