Users cannot change passwords

[Jason Cochrane]

When the password expiration date on the user passwords expires, the user is
prompted to change their password. When the user tries to change the
password, they recieve the following error message:

You do not have permission to change this password

Any ideas on how to correct this? I have looked for a group policy, but did
not find anything that looked like it could affect this, but I am not sure.

thanks,

jason

 

[Steven L Umbach]

There are two main reasons for this. One is that in Domain Controller
Security Policy [or possibly local on a domain controller] the security
option for addtional restrictions for anonymous connections is set to no
access without explicit anonymous permissions, which mainly affects non W2K
clients including XP Pro. The other is that the everyone group does not have
change password permissions to the user object in Active Directory. See
links below for more info. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;258788
http://support.microsoft.com/default.aspx?scid=kb;en-us;823659
http://support.microsoft.com/default.aspx?scid=kb;en-us;273004

 

[Frank]

Hi Jason,

I had this problem on a nt4 domain once, which was caused
by the restriction that people should be logged on before
they could change their pw, dunno if this applies in your
case, but perhaps an idea to look into.

Regards

Frank