You do not have permission to change your password

[David]

XP Pro Users are required to change password on first
logon, but they get You do not have permission to change
your password. If they log on with a 2000 pro computer it
works fine. I checked security setting everyone group can
change password. any ideas

 

[Michael Solomon \(MS-MVP Windows Shell/User\)]

I'm not familiar with a requirement in XP Pro for first time log ins to
change their password unless this has something to do with logging into a
domain, something of which I'm unfamiliar. That said, when you say you've
checked security setting and everyone in the group has such a privilege, are
you saying you set this up in Group Policy Editor? Second, regardless of
the setting, do these users have limited accounts or are they members of the
Administrator's group.

According to XP Help and Support on the Start Menu, "Only a member of the
Administrators group can add users to groups, change user passwords, or
modify most system settings." This would seem to override any such
privileges you might try to assign to a group other than the Administrators
group.

 

[david]

-----Original Message-----
I'm not familiar with a requirement in XP Pro for first time log ins to
change their password unless this has something to do with logging into a
domain, something of which I'm unfamiliar. That said, when you say you've
checked security setting and everyone in the group has such a privilege, are
you saying you set this up in Group Policy Editor? Second, regardless of
the setting, do these users have limited accounts or are they members of the
Administrator's group.

According to XP Help and Support on the Start Menu, "Only a member of the
Administrators group can add users to groups, change user passwords, or
modify most system settings." This would seem to override any such
privileges you might try to assign to a group other than the Administrators
group.
--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/




.
Users are logging onto a domain, and are apart of OU, the

ou security settings mus allow the everyone group
to "change password". One of the groups is assigned power
users on the local machine, and they get the message can't
change password don't have permissions. I thought it was
because the password didn't meet complexity, but that
wasn't it.

 

[Michael Solomon \(MS-MVP Windows Shell/User\)]

If their group isn't a part of the Administrators Group, they can't change
permissions. Power Users are users that are not in the Administrators Group
but are granted permissions for many functions of an administrator but they
can't be given permission to change passwords.

 

[David]

-----Original Message-----
If their group isn't a part of the Administrators Group, they can't change
permissions. Power Users are users that are not in the Administrators Group
but are granted permissions for many functions of an administrator but they
can't be given permission to change passwords.

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/




.
Maybe i didn't word my questions correctly or i'm

missing the obvious. I don't want to change permissions, i
just want users to be able to change their password when
prompted during their first login. It works like it's
suppose to from the 2000 workstations, but the xp pro
workstations sais they don't have permission to change
their password. the same account that is able to change
password on a 2000 ws can't from the xp ws. both are in
the same domain and same ou. they shouldn't have to be
part of the admin group correct? Wouldn't that defeat the
purpose of having admin?