Re: Unable to change passwords - Windows 2003 Domain

It sounds like you can not change your password on a domain computer that
another domain user can change their password?? The first thing I would
check is that your user accounts in Active Directory in properties do not
have "can not change password" selected. If that does not help make sure
auditing of account management is enabled in Domain Controller Security
Policy and then check for account management events for your account name
when the problem occurs to see if there is any explanation of why the
failure occurred. You might also try creating a test user that is just a
normal domain user and then verify that he can change his password. Then add
that test user to the same groups as your account is a member of , make
sure you logoff that test user, logon again and now see if that test user
can change his password. On a XP Pro computer you are logged onto run
rsop.msc and check for any Group Policy user configuration settings that may
be causing the problem. Offhand I can't think of one but there may be
something. --- Steve


"Jay" <jay24k@xxxxxxxxx> wrote in message
news:1151673187.549976.210320@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
For some reasons, we are running into issues changing passwords in our
domain. Regular users are able to with no issues however only users in
the IT department are unable. We are in a seperate OU but moving me
out of the OU to the regular users OU does nothing.

I did a gpresult and it does show me processing the domain local
policy. I also am unable to change it while logging in or logged in
using the CTRL ALT DEL. It comes back with access is denied. This
happens on both 2000 and XP workstations. I do not see any DENY
permissions set for our group and I am a enterprise admin so I have
rights to all.

Does anyone have any ideas on this? I'm kind of at a loss.

Thanks.



.

Relevant Pages

  • Re: GPO - Password policy do not apply
    ... The only place where you can define password (Account) policy for domain is ... but _not_ domain user accounts. ... This is domain computer ...
    (microsoft.public.win2000.security)
  • Re: GPO - Password policy do not apply
    ... This is default domain policy. ... > The only place where you can define password (Account) policy for domain is ... This is domain computer ...
    (microsoft.public.win2000.security)
  • Re: GPO causing client security logs to fill?
    ... a virus in play. ... settings to be applied on your client workstations. ... Group Policy is a complex and often misunderstood beast. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Unlink the Default Domain Controller Policy (As it was not previously ... settings to be applied on your client workstations. ... I modified the account ... So basically, the Account lockout threshold, account lockout ...
    (microsoft.public.windows.server.sbs)