User can't change password on 2kPro

[Karl Roby]

I've been working on building an Active Directory
environment for our Enterprise, and I have most of it
done so I'm at the testing stage. I have run into a
strange problem.

I have a Windows 2000 Pro pc which is a member of the
domain. When the test users login to this machine they
can't change their own passwords - the reason given is
that the password being entered has been used previously.
However these are brand new users only I have access to -
they have NOT previously had any other passwords. As the
administrator if I go into AD Users and Computers I can
reset the passwords no problem. If I take these users and
log them into a Windows XP pc which is also a member of
the domain they can change their passwords fine.
Therefore this is a Windows 2000 issue but I can't figure
it out.

Anybody got any ideas?

 

[Steven L Umbach]

Double check that they are logged onto the domain and not the local machine.
I would also run netdiag on that machine to check that the machine account
is still current as is the secure channel, dns, etc. It is possible the
machine is having difficulty finding a domain controller and the user may be
logging on with cached credentials which the set command could verify. ---
Steve

 

[Guest]

Done those. Definately loggin onto the domain. Netdiag
looked fine. I edned up removing the workstation from the
domain and readding it, which then fixed it, but as soon
as I rebooted again it did the same thing. Very bizarre.

 

[Marina Roos]

Have a look at the restrictanonymous registry entry on the server. It should
be 0 or 1.