AD changes not propogated?

[Jeff]

One of our AD admins changed a user's password and set it to be changed on
next login. The next morning the user logged in to her PC but was never
prompted to change her password. Looking at the user account, it still has
the check box checked for change password at next login. After rebooting
and logging in again, the user was finally prompted to change her password.

Has anyone seen this? What might be causing such an issue?

Any insight is greatly appreciated.

Thanks,

Jeff

 

[Jordan]

How many DCs do you have in the domain?
It's possible that the change was made on a DC and the authentication was
done by another DC, whereby the changes had yet to be replicated.
From the client's machine, you can run "set longonserver" to see the
authenticating DC.

To verify if you are having any replication issue, you can run "repadmin
/showreps".

 

[Jeff]

We have 2 DCs at the site where this is occurring.

 

[Jordan]

And what do you get from repadmin /showreps?
Verify that there is no replication problem between the DC where the changes
is set and the authenticating DC.
Create another test user and test again.

 

[Jeff]

I will create a test user and see if I cn duplicate the problem. At that
point I will do repadmin as well. We needed to get the user back up and
running so a reboot fixed it. But I need to determine if there is a larger
issue with AD. Thanks for your assistance.

Jeff