Unable to change Password

[M P]

I notice that after I upgrade my NT domain into Windows 2000 Mixed mode (One
Win2K SP4 PDC and One WinNT Server 4.0 SP6a BDC), my NT Workstation clients
cannot change password. When password expires, and when they will assign new
password to the change password box, message box prompt like this, " Unable
to change password on this account (C00000BE). Please contact your system
administrator".

Need your help...

Mark

 

[Steven L Umbach]

Check the "additional restrictions for anonymous connections" security option.
If it is set to no access without explicit anonymous permissions, problems like what
you describe will occur. -- Steve

http://support.microsoft.com/?kbid=246261

 

[Joe Q]

Make sure the account is not locked out.

 

[M P]

I tried to configure this on the Win2K PDC, but after restart, only Windows
2000 Prof can logon to the domain and Windowsnt NT Workstation cannot. What
seems to be the problem?

I just remove the registry settings as described on the 246261, then
restart, and all workstation can log again to the domain.

Need help!!!

 

[Steven L Umbach]

Sorry. I did not mean to imply that you should change your settings to
what the KB article referenced. The article points out the kind of probelms
that will occurr IF you change it to that setting. In the Local Security
Policy of your domain controller under security options, change the setting
for additional restictions for anonymous connections to "none - rely on
default" if it is already not set at that. If you continue to have problems,
try disabling the four "digitally sign client/server communications"
security options also, and reboot. Your NT computers should also be at least
SP4 . --- Steve

 

[M P]

thanks for the reply.
where can I find the option to disable the "digitally sign client/server
communications"

 

[Steven L Umbach]

Open Local Security Policy on domain controller. Then go to security
settings/local policies/security options and settings will be in the
ist. -- Steve