Users cannot change password at this time.

[Osmar]

Hi, could someone help me!

The question is i have a Win2k server with AD and the users are set in
AD normally, User must change password at next Logon (not checked),
Password nerver expires (not checked).

In Domain Security Policies: the Default Domain Policy is disabled.
and i have setup a police that called PASSWORD, and i have setup in
maximum password age to 100
days and Min to 95 days. And the Users still cannot change the
password in your desktop.

The Error is : "Cannot change password at this time" .

I have seen in sysvol/policies that have 4 Folders with that
unfriendly name, this indicate that i have 4 policies, but i have
checked in AD users and computers/Domain Properties , and i have seen
just these 2 policies that i have mentioned.
In these sequence:

1 - Password (i have created) - No override (unmarked)
2 - Default Domain Policy - No override (marked) - disable(marked)

Anyone know why this error's happening. How can i solve this?

Thanks,
Osmar Pessanha Magalhães.

 

[Paul Bergson]

The only place you can implement user password policies is in the default
domain policy. From what I read here you have disabled that policy.
Re-enable it and change it to what you need and see if that helps.