User requested change password fails

[Mark K]

What would cause non-admin types (domain users) to 'not'
be able to successfully request a change of password? In
AD I can set it to 'user must change password at next
login' and that works. But if the USER initiates the
change request, the user does get the change password
dialog, and enters their old and new pw's. It fails with
a message (password can not be changed at this time) and
a 627 failure event in the security event logs on the DC.


Another note - me as domain admin can request and
successfully change my password.

Mark

 

[Steven L Umbach]

Hi Mark.

The following KB link describes this error which may or may not be pertinent to your
situation and describes a problem with minimum password age. If he can do it while
logged on but not before being logged on check his account in AD to make sure
"everyone" has password change permissions to it. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;273004