Users cannot change password

[Hindy]

OK, first of all password policies can only be set at the
domain level. You can set these options on a OU, but they
will only effect the local accounts held on machines
within this OU.

The reason you are getting this message is probably
because you have the minimum password age set to 87 days.
What you are saying with this setting is users can't
change their password for 87 days.

This setting is used to stop users circumventing
your "maintain password history" setting, by rapidly
changing their password so they can reset it back to what
it originally was. Also, having this option set to such a
high number introduces a further secuirty risk because if
a password is compromised the user can't change it until
the 87 days have expired.

Try setting it to a more reasonable figure such as 3
days.

 

[Richard Di Bernardi]

This resolution is working. Thank you very much for your
help!