User Accounts and Password Policy

[Sherry Schafer]

We had a NT 4.0 domain which we had set the password
policies on. We upgraded the domain to 2000 and about 2
weeks ago, set a more restrictive password policy. We
basically changed the age to min age = 0 and max age = 30
(before: min = 0 max = 45). Now there are a about 5 people
out of nearly 1000 that are getting asked to change there
passwords every day because the password has expired. I
would greatly appreciate any help anyone could give. I
have looked through the MS Articles and the message board
without being able to find anything.

 

[Aimme Lirette MSFT]

Try resetting their workstations secure channel with the domain:

http://support.microsoft.com/?id=216393

Also, you may want to verify the domain controller they are authenticating
with is replicating and working as expected in Active directory. Check the
event logs for errors.

You can test the DC the machine has a secure channel with by running:
nltest /sc_query:<domainname>
this will return the DC the computer is connected with. Sometimes changing
the password will go to a different DC- but this is a good place to start.

Thank you,
Aimme Lirette