Can't force new passwords (AD)

[Russell DeMarco]

I setup my 1st W2K network with AD. It works great. The only problem I'm
having is with passwords. Now that we're going live. I checked off the box
(in AD) to change PW at next login. It's not asking. The PW is still
blank.

At each workstation (Win XP) I added all of the users domain accounts to the
local power users group (so anyone can login from anywhere). But that local
group has the local user setup separately (not his domain acct). This was
done initially as we thought only the user's who desk it was would use that
computer. Do I need to remove that user locally and add back his domain
account to the local power users group in order for the PW option to work
(thru AD)?

 

[Doug Sherman [MVP]]

When you first join a Win2k/XP machine to an AD domain and reboot, the
default log on will be to the local machine and not the domain - and, NO - I
don't know why.

When the log on screen on the XP machine comes up, if the 'Log on to' line
is not displayed, click on 'Options'. This will display the 'Log on to'
line. Make sure you are logging onto the domain and not the local machine.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

 

[Russell DeMarco]

It's definitely logging into the domain. Should I delete the local user and
add them back from the domain? If so, will that user's profile (local
settings, etc.) be lost? Thanks.