We are needing to add an NT 4 workstation to our domain, which has been
converted to a native-mode domain. We currently only have 2000 and XP Pro
systems on the domain so we have not run into this problem before.

We are able to create the computer account and have it join the domain, but
if we try to have a user chage their password on that system it comes up
with the error, "The password on this account cannot be changed at this
time." We tried to install Active Directory Clien Extensions and adding a
registry hack for NTLMv2 in HKLM\System\CurrentControlSet\Control\LSA, both
of whcih have done nothing for this problem.

Is there a possible solution for this problem? Are a solution that would
allow for a Windows 95 system to change passwords?

Thank you.

You'll need to add WINS to your server. Also, add options 044 and 046 (0x8)
to DHCP-server, Scope options.
Make sure that the ipconfig/all from all clients is pointing to your
server-IP.

Marina

"william r. riley" <(E-Mail Removed)> schreef in bericht
news:(E-Mail Removed)...
> We are needing to add an NT 4 workstation to our domain, which has been
> converted to a native-mode domain. We currently only have 2000 and XP Pro
> systems on the domain so we have not run into this problem before.
>
> We are able to create the computer account and have it join the domain,
but
> if we try to have a user chage their password on that system it comes up
> with the error, "The password on this account cannot be changed at this
> time." We tried to install Active Directory Clien Extensions and adding a
> registry hack for NTLMv2 in HKLM\System\CurrentControlSet\Control\LSA,
both
> of whcih have done nothing for this problem.
>
> Is there a possible solution for this problem? Are a solution that would
> allow for a Windows 95 system to change passwords?
>
> Thank you.
>
>

We have a WINS server with options 044 and 046 set correctly and have
verified it on the client systems.
IS there another suggestion or an elaboration to the first that I am
missing?

Bill
"Marina Roos" <(E-Mail Removed)> wrote in message
news:zjeub.155894$(E-Mail Removed)...
> You'll need to add WINS to your server. Also, add options 044 and 046
(0x8)
> to DHCP-server, Scope options.
> Make sure that the ipconfig/all from all clients is pointing to your
> server-IP.
>
> Marina
>
> "william r. riley" <(E-Mail Removed)> schreef in bericht
> news:(E-Mail Removed)...
> > We are needing to add an NT 4 workstation to our domain, which has been
> > converted to a native-mode domain. We currently only have 2000 and XP
Pro
> > systems on the domain so we have not run into this problem before.
> >
> > We are able to create the computer account and have it join the domain,
> but
> > if we try to have a user chage their password on that system it comes up
> > with the error, "The password on this account cannot be changed at this
> > time." We tried to install Active Directory Clien Extensions and adding
a
> > registry hack for NTLMv2 in HKLM\System\CurrentControlSet\Control\LSA,
> both
> > of whcih have done nothing for this problem.
> >
> > Is there a possible solution for this problem? Are a solution that
would
> > allow for a Windows 95 system to change passwords?
> >
> > Thank you.
> >
> >
>
>

Hi Bill,

Do you possible have the RestrictAnonymous setting set to 2 on the server?
Put it back to 0 or 1.

Marina

"william r. riley" <(E-Mail Removed)> schreef in bericht
news:(E-Mail Removed)...
> We have a WINS server with options 044 and 046 set correctly and have
> verified it on the client systems.
> IS there another suggestion or an elaboration to the first that I am
> missing?
>
> Bill
> "Marina Roos" <(E-Mail Removed)> wrote in message
> news:zjeub.155894$(E-Mail Removed)...
> > You'll need to add WINS to your server. Also, add options 044 and 046
> (0x8)
> > to DHCP-server, Scope options.
> > Make sure that the ipconfig/all from all clients is pointing to your
> > server-IP.
> >
> > Marina
> >
> > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > news:(E-Mail Removed)...
> > > We are needing to add an NT 4 workstation to our domain, which has
been
> > > converted to a native-mode domain. We currently only have 2000 and XP
> Pro
> > > systems on the domain so we have not run into this problem before.
> > >
> > > We are able to create the computer account and have it join the
domain,
> > but
> > > if we try to have a user chage their password on that system it comes
up
> > > with the error, "The password on this account cannot be changed at
this
> > > time." We tried to install Active Directory Clien Extensions and
adding
> a
> > > registry hack for NTLMv2 in HKLM\System\CurrentControlSet\Control\LSA,
> > both
> > > of whcih have done nothing for this problem.
> > >
> > > Is there a possible solution for this problem? Are a solution that
> would
> > > allow for a Windows 95 system to change passwords?
> > >
> > > Thank you.
> > >
> > >
> >
> >
>
>

Afternoon Marina,

Where would I find this value in the registry and what does this setting do?

Bill
"Marina Roos" <(E-Mail Removed)> wrote in message
news:tmsub.156321$(E-Mail Removed)...
> Hi Bill,
>
> Do you possible have the RestrictAnonymous setting set to 2 on the server?
> Put it back to 0 or 1.
>
> Marina
>
> "william r. riley" <(E-Mail Removed)> schreef in bericht
> news:(E-Mail Removed)...
> > We have a WINS server with options 044 and 046 set correctly and have
> > verified it on the client systems.
> > IS there another suggestion or an elaboration to the first that I am
> > missing?
> >
> > Bill
> > "Marina Roos" <(E-Mail Removed)> wrote in message
> > news:zjeub.155894$(E-Mail Removed)...
> > > You'll need to add WINS to your server. Also, add options 044 and 046
> > (0x8)
> > > to DHCP-server, Scope options.
> > > Make sure that the ipconfig/all from all clients is pointing to your
> > > server-IP.
> > >
> > > Marina
> > >
> > > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > > news:(E-Mail Removed)...
> > > > We are needing to add an NT 4 workstation to our domain, which has
> been
> > > > converted to a native-mode domain. We currently only have 2000 and
XP
> > Pro
> > > > systems on the domain so we have not run into this problem before.
> > > >
> > > > We are able to create the computer account and have it join the
> domain,
> > > but
> > > > if we try to have a user chage their password on that system it
comes
> up
> > > > with the error, "The password on this account cannot be changed at
> this
> > > > time." We tried to install Active Directory Clien Extensions and
> adding
> > a
> > > > registry hack for NTLMv2 in
HKLM\System\CurrentControlSet\Control\LSA,
> > > both
> > > > of whcih have done nothing for this problem.
> > > >
> > > > Is there a possible solution for this problem? Are a solution that
> > would
> > > > allow for a Windows 95 system to change passwords?
> > > >
> > > > Thank you.
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Hi Bill,

Article 246261 describes this.
You can find the key under
HKEY_Local_Machine/System/Currentcontrolset/Control/LSA

Marina

"william r. riley" <(E-Mail Removed)> schreef in bericht
news:(E-Mail Removed)...
> Afternoon Marina,
>
> Where would I find this value in the registry and what does this setting
do?
>
> Bill
> "Marina Roos" <(E-Mail Removed)> wrote in message
> news:tmsub.156321$(E-Mail Removed)...
> > Hi Bill,
> >
> > Do you possible have the RestrictAnonymous setting set to 2 on the
server?
> > Put it back to 0 or 1.
> >
> > Marina
> >
> > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > news:(E-Mail Removed)...
> > > We have a WINS server with options 044 and 046 set correctly and have
> > > verified it on the client systems.
> > > IS there another suggestion or an elaboration to the first that I am
> > > missing?
> > >
> > > Bill
> > > "Marina Roos" <(E-Mail Removed)> wrote in message
> > > news:zjeub.155894$(E-Mail Removed)...
> > > > You'll need to add WINS to your server. Also, add options 044 and
046
> > > (0x8)
> > > > to DHCP-server, Scope options.
> > > > Make sure that the ipconfig/all from all clients is pointing to your
> > > > server-IP.
> > > >
> > > > Marina
> > > >
> > > > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > > > news:(E-Mail Removed)...
> > > > > We are needing to add an NT 4 workstation to our domain, which has
> > been
> > > > > converted to a native-mode domain. We currently only have 2000
and
> XP
> > > Pro
> > > > > systems on the domain so we have not run into this problem before.
> > > > >
> > > > > We are able to create the computer account and have it join the
> > domain,
> > > > but
> > > > > if we try to have a user chage their password on that system it
> comes
> > up
> > > > > with the error, "The password on this account cannot be changed at
> > this
> > > > > time." We tried to install Active Directory Clien Extensions and
> > adding
> > > a
> > > > > registry hack for NTLMv2 in
> HKLM\System\CurrentControlSet\Control\LSA,
> > > > both
> > > > > of whcih have done nothing for this problem.
> > > > >
> > > > > Is there a possible solution for this problem? Are a solution
that
> > > would
> > > > > allow for a Windows 95 system to change passwords?
> > > > >
> > > > > Thank you.
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Marina,

We have looked up information on this and are not sure how this can help.
Sorry to sound so ignorant, but it doesn't really seem to be the issue. If
we have installed the dsclient.exe on the nt 4 wks in th manner described by
MS, then why isn't it allowing us to change the password? It states in
article
http://www.microsoft.com/windows2000...dextension.asp
that this should be a feature that works.

Is it that we are logging on to a 2000 domain in native mode? If so, are
there any know work arounds?

Bill

"Marina Roos" <(E-Mail Removed)> wrote in message
news:ZAwub.156524$(E-Mail Removed)...
> Hi Bill,
>
> Article 246261 describes this.
> You can find the key under
> HKEY_Local_Machine/System/Currentcontrolset/Control/LSA
>
> Marina
>
> "william r. riley" <(E-Mail Removed)> schreef in bericht
> news:(E-Mail Removed)...
> > Afternoon Marina,
> >
> > Where would I find this value in the registry and what does this setting
> do?
> >
> > Bill
> > "Marina Roos" <(E-Mail Removed)> wrote in message
> > news:tmsub.156321$(E-Mail Removed)...
> > > Hi Bill,
> > >
> > > Do you possible have the RestrictAnonymous setting set to 2 on the
> server?
> > > Put it back to 0 or 1.
> > >
> > > Marina
> > >
> > > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > > news:(E-Mail Removed)...
> > > > We have a WINS server with options 044 and 046 set correctly and
have
> > > > verified it on the client systems.
> > > > IS there another suggestion or an elaboration to the first that I am
> > > > missing?
> > > >
> > > > Bill
> > > > "Marina Roos" <(E-Mail Removed)> wrote in message
> > > > news:zjeub.155894$(E-Mail Removed)...
> > > > > You'll need to add WINS to your server. Also, add options 044 and
> 046
> > > > (0x8)
> > > > > to DHCP-server, Scope options.
> > > > > Make sure that the ipconfig/all from all clients is pointing to
your
> > > > > server-IP.
> > > > >
> > > > > Marina
> > > > >
> > > > > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > > > > news:(E-Mail Removed)...
> > > > > > We are needing to add an NT 4 workstation to our domain, which
has
> > > been
> > > > > > converted to a native-mode domain. We currently only have 2000
> and
> > XP
> > > > Pro
> > > > > > systems on the domain so we have not run into this problem
before.
> > > > > >
> > > > > > We are able to create the computer account and have it join the
> > > domain,
> > > > > but
> > > > > > if we try to have a user chage their password on that system it
> > comes
> > > up
> > > > > > with the error, "The password on this account cannot be changed
at
> > > this
> > > > > > time." We tried to install Active Directory Clien Extensions
and
> > > adding
> > > > a
> > > > > > registry hack for NTLMv2 in
> > HKLM\System\CurrentControlSet\Control\LSA,
> > > > > both
> > > > > > of whcih have done nothing for this problem.
> > > > > >
> > > > > > Is there a possible solution for this problem? Are a solution
> that
> > > > would
> > > > > > allow for a Windows 95 system to change passwords?
> > > > > >
> > > > > > Thank you.
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Hi Bill,

Can you tell me how it is set in the registry? Have you read the article?
When it is set to 2 downlevel workstations or servers are not able to set up
a netlogon secure channel, nt-users are not able to change passwords after
they expire. Macintosh users are not able to change passwords at all.
Browser service is not able to retrieve domain lists or server lists from
backup browsers, masterbrowsers or domain manster browsers.

Marina

"william r. riley" <(E-Mail Removed)> schreef in bericht
news:#(E-Mail Removed)...
> Marina,
>
> We have looked up information on this and are not sure how this can help.
> Sorry to sound so ignorant, but it doesn't really seem to be the issue.
If
> we have installed the dsclient.exe on the nt 4 wks in th manner described
by
> MS, then why isn't it allowing us to change the password? It states in
> article
>
http://www.microsoft.com/windows2000...lletins/adexte
nsion.asp
> that this should be a feature that works.
>
> Is it that we are logging on to a 2000 domain in native mode? If so, are
> there any know work arounds?
>
> Bill
>
> "Marina Roos" <(E-Mail Removed)> wrote in message
> news:ZAwub.156524$(E-Mail Removed)...
> > Hi Bill,
> >
> > Article 246261 describes this.
> > You can find the key under
> > HKEY_Local_Machine/System/Currentcontrolset/Control/LSA
> >
> > Marina
> >
> > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > news:(E-Mail Removed)...
> > > Afternoon Marina,
> > >
> > > Where would I find this value in the registry and what does this
setting
> > do?
> > >
> > > Bill
> > > "Marina Roos" <(E-Mail Removed)> wrote in message
> > > news:tmsub.156321$(E-Mail Removed)...
> > > > Hi Bill,
> > > >
> > > > Do you possible have the RestrictAnonymous setting set to 2 on the
> > server?
> > > > Put it back to 0 or 1.
> > > >
> > > > Marina
> > > >
> > > > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > > > news:(E-Mail Removed)...
> > > > > We have a WINS server with options 044 and 046 set correctly and
> have
> > > > > verified it on the client systems.
> > > > > IS there another suggestion or an elaboration to the first that I
am
> > > > > missing?
> > > > >
> > > > > Bill
> > > > > "Marina Roos" <(E-Mail Removed)> wrote in message
> > > > > news:zjeub.155894$(E-Mail Removed)...
> > > > > > You'll need to add WINS to your server. Also, add options 044
and
> > 046
> > > > > (0x8)
> > > > > > to DHCP-server, Scope options.
> > > > > > Make sure that the ipconfig/all from all clients is pointing to
> your
> > > > > > server-IP.
> > > > > >
> > > > > > Marina
> > > > > >
> > > > > > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > > > > > news:(E-Mail Removed)...
> > > > > > > We are needing to add an NT 4 workstation to our domain, which
> has
> > > > been
> > > > > > > converted to a native-mode domain. We currently only have
2000
> > and
> > > XP
> > > > > Pro
> > > > > > > systems on the domain so we have not run into this problem
> before.
> > > > > > >
> > > > > > > We are able to create the computer account and have it join
the
> > > > domain,
> > > > > > but
> > > > > > > if we try to have a user chage their password on that system
it
> > > comes
> > > > up
> > > > > > > with the error, "The password on this account cannot be
changed
> at
> > > > this
> > > > > > > time." We tried to install Active Directory Clien Extensions
> and
> > > > adding
> > > > > a
> > > > > > > registry hack for NTLMv2 in
> > > HKLM\System\CurrentControlSet\Control\LSA,
> > > > > > both
> > > > > > > of whcih have done nothing for this problem.
> > > > > > >
> > > > > > > Is there a possible solution for this problem? Are a solution
> > that
> > > > > would
> > > > > > > allow for a Windows 95 system to change passwords?
> > > > > > >
> > > > > > > Thank you.
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Good afternoon Marina,

Yes we read the article(s) and have it set at the default values of
restrictanonymous 0 and restrictanonymoussam 1. Does this help?

Bill

"Marina Roos" <(E-Mail Removed)> wrote in message
news:7Vyub.156630$(E-Mail Removed)...
> Hi Bill,
>
> Can you tell me how it is set in the registry? Have you read the article?
> When it is set to 2 downlevel workstations or servers are not able to set
up
> a netlogon secure channel, nt-users are not able to change passwords after
> they expire. Macintosh users are not able to change passwords at all.
> Browser service is not able to retrieve domain lists or server lists from
> backup browsers, masterbrowsers or domain manster browsers.
>
> Marina
>
> "william r. riley" <(E-Mail Removed)> schreef in bericht
> news:#(E-Mail Removed)...
> > Marina,
> >
> > We have looked up information on this and are not sure how this can
help.
> > Sorry to sound so ignorant, but it doesn't really seem to be the issue.
> If
> > we have installed the dsclient.exe on the nt 4 wks in th manner
described
> by
> > MS, then why isn't it allowing us to change the password? It states in
> > article
> >
>
http://www.microsoft.com/windows2000...lletins/adexte
> nsion.asp
> > that this should be a feature that works.
> >
> > Is it that we are logging on to a 2000 domain in native mode? If so,
are
> > there any know work arounds?
> >
> > Bill
> >
> > "Marina Roos" <(E-Mail Removed)> wrote in message
> > news:ZAwub.156524$(E-Mail Removed)...
> > > Hi Bill,
> > >
> > > Article 246261 describes this.
> > > You can find the key under
> > > HKEY_Local_Machine/System/Currentcontrolset/Control/LSA
> > >
> > > Marina
> > >
> > > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > > news:(E-Mail Removed)...
> > > > Afternoon Marina,
> > > >
> > > > Where would I find this value in the registry and what does this
> setting
> > > do?
> > > >
> > > > Bill
> > > > "Marina Roos" <(E-Mail Removed)> wrote in message
> > > > news:tmsub.156321$(E-Mail Removed)...
> > > > > Hi Bill,
> > > > >
> > > > > Do you possible have the RestrictAnonymous setting set to 2 on the
> > > server?
> > > > > Put it back to 0 or 1.
> > > > >
> > > > > Marina
> > > > >
> > > > > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > > > > news:(E-Mail Removed)...
> > > > > > We have a WINS server with options 044 and 046 set correctly and
> > have
> > > > > > verified it on the client systems.
> > > > > > IS there another suggestion or an elaboration to the first that
I
> am
> > > > > > missing?
> > > > > >
> > > > > > Bill
> > > > > > "Marina Roos" <(E-Mail Removed)> wrote in
message
> > > > > > news:zjeub.155894$(E-Mail Removed)...
> > > > > > > You'll need to add WINS to your server. Also, add options 044
> and
> > > 046
> > > > > > (0x8)
> > > > > > > to DHCP-server, Scope options.
> > > > > > > Make sure that the ipconfig/all from all clients is pointing
to
> > your
> > > > > > > server-IP.
> > > > > > >
> > > > > > > Marina
> > > > > > >
> > > > > > > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > > > > > > news:(E-Mail Removed)...
> > > > > > > > We are needing to add an NT 4 workstation to our domain,
which
> > has
> > > > > been
> > > > > > > > converted to a native-mode domain. We currently only have
> 2000
> > > and
> > > > XP
> > > > > > Pro
> > > > > > > > systems on the domain so we have not run into this problem
> > before.
> > > > > > > >
> > > > > > > > We are able to create the computer account and have it join
> the
> > > > > domain,
> > > > > > > but
> > > > > > > > if we try to have a user chage their password on that system
> it
> > > > comes
> > > > > up
> > > > > > > > with the error, "The password on this account cannot be
> changed
> > at
> > > > > this
> > > > > > > > time." We tried to install Active Directory Clien
Extensions
> > and
> > > > > adding
> > > > > > a
> > > > > > > > registry hack for NTLMv2 in
> > > > HKLM\System\CurrentControlSet\Control\LSA,
> > > > > > > both
> > > > > > > > of whcih have done nothing for this problem.
> > > > > > > >
> > > > > > > > Is there a possible solution for this problem? Are a
solution
> > > that
> > > > > > would
> > > > > > > > allow for a Windows 95 system to change passwords?
> > > > > > > >
> > > > > > > > Thank you.
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Hi Bill,

Well, have you rebooted the server and tried?

Marina

"william r. riley" <(E-Mail Removed)> schreef in bericht
news:(E-Mail Removed)...
> Good afternoon Marina,
>
> Yes we read the article(s) and have it set at the default values of
> restrictanonymous 0 and restrictanonymoussam 1. Does this help?
>
> Bill
>
> "Marina Roos" <(E-Mail Removed)> wrote in message
> news:7Vyub.156630$(E-Mail Removed)...
> > Hi Bill,
> >
> > Can you tell me how it is set in the registry? Have you read the
article?
> > When it is set to 2 downlevel workstations or servers are not able to
set
> up
> > a netlogon secure channel, nt-users are not able to change passwords
after
> > they expire. Macintosh users are not able to change passwords at all.
> > Browser service is not able to retrieve domain lists or server lists
from
> > backup browsers, masterbrowsers or domain manster browsers.
> >
> > Marina
> >
> > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > news:#(E-Mail Removed)...
> > > Marina,
> > >
> > > We have looked up information on this and are not sure how this can
> help.
> > > Sorry to sound so ignorant, but it doesn't really seem to be the
issue.
> > If
> > > we have installed the dsclient.exe on the nt 4 wks in th manner
> described
> > by
> > > MS, then why isn't it allowing us to change the password? It states
in
> > > article
> > >
> >
>
http://www.microsoft.com/windows2000...lletins/adexte
> > nsion.asp
> > > that this should be a feature that works.
> > >
> > > Is it that we are logging on to a 2000 domain in native mode? If so,
> are
> > > there any know work arounds?
> > >
> > > Bill
> > >
> > > "Marina Roos" <(E-Mail Removed)> wrote in message
> > > news:ZAwub.156524$(E-Mail Removed)...
> > > > Hi Bill,
> > > >
> > > > Article 246261 describes this.
> > > > You can find the key under
> > > > HKEY_Local_Machine/System/Currentcontrolset/Control/LSA
> > > >
> > > > Marina
> > > >
> > > > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > > > news:(E-Mail Removed)...
> > > > > Afternoon Marina,
> > > > >
> > > > > Where would I find this value in the registry and what does this
> > setting
> > > > do?
> > > > >
> > > > > Bill
> > > > > "Marina Roos" <(E-Mail Removed)> wrote in message
> > > > > news:tmsub.156321$(E-Mail Removed)...
> > > > > > Hi Bill,
> > > > > >
> > > > > > Do you possible have the RestrictAnonymous setting set to 2 on
the
> > > > server?
> > > > > > Put it back to 0 or 1.
> > > > > >
> > > > > > Marina
> > > > > >
> > > > > > "william r. riley" <(E-Mail Removed)> schreef in bericht
> > > > > > news:(E-Mail Removed)...
> > > > > > > We have a WINS server with options 044 and 046 set correctly
and
> > > have
> > > > > > > verified it on the client systems.
> > > > > > > IS there another suggestion or an elaboration to the first
that
> I
> > am
> > > > > > > missing?
> > > > > > >
> > > > > > > Bill
> > > > > > > "Marina Roos" <(E-Mail Removed)> wrote in
> message
> > > > > > > news:zjeub.155894$(E-Mail Removed)...
> > > > > > > > You'll need to add WINS to your server. Also, add options
044
> > and
> > > > 046
> > > > > > > (0x8)
> > > > > > > > to DHCP-server, Scope options.
> > > > > > > > Make sure that the ipconfig/all from all clients is pointing
> to
> > > your
> > > > > > > > server-IP.
> > > > > > > >
> > > > > > > > Marina
> > > > > > > >
> > > > > > > > "william r. riley" <(E-Mail Removed)> schreef in
bericht
> > > > > > > > news:(E-Mail Removed)...
> > > > > > > > > We are needing to add an NT 4 workstation to our domain,
> which
> > > has
> > > > > > been
> > > > > > > > > converted to a native-mode domain. We currently only have
> > 2000
> > > > and
> > > > > XP
> > > > > > > Pro
> > > > > > > > > systems on the domain so we have not run into this problem
> > > before.
> > > > > > > > >
> > > > > > > > > We are able to create the computer account and have it
join
> > the
> > > > > > domain,
> > > > > > > > but
> > > > > > > > > if we try to have a user chage their password on that
system
> > it
> > > > > comes
> > > > > > up
> > > > > > > > > with the error, "The password on this account cannot be
> > changed
> > > at
> > > > > > this
> > > > > > > > > time." We tried to install Active Directory Clien
> Extensions
> > > and
> > > > > > adding
> > > > > > > a
> > > > > > > > > registry hack for NTLMv2 in
> > > > > HKLM\System\CurrentControlSet\Control\LSA,
> > > > > > > > both
> > > > > > > > > of whcih have done nothing for this problem.
> > > > > > > > >
> > > > > > > > > Is there a possible solution for this problem? Are a
> solution
> > > > that
> > > > > > > would
> > > > > > > > > allow for a Windows 95 system to change passwords?
> > > > > > > > >
> > > > > > > > > Thank you.
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>