Change password --> access denied for wxp user on 2k domain

[Andreas]

All WinXPsp1 clients (all patches) on our network are joined to a
win2ksp4 srv domain (all patches).

User passwords are set to expire after 42 days and 14 days before the
password expires Windows will, at login, start asking the user if it
wants to change the password now or wait.

Problem:
If user chooses to change now and enter a valid password (they do this
correctly, I have confirmed several times) they receive an Access
Denied message.

However, if a user chooses not to change its password at this time and
logs into windows and then attempts a password change (when logged in)
it is succesful.
This, of course, will not work if the password has expired so I would
like to know if there is a way to fix it and allow users to change
their password without being logged in.

Best regards
Andreas Warberg

(This message was also posted in win2000.active_directory group but
received no answers)

 

[Guest]

I'm not an AD guru by any means, but it could be that since the user isn't actually logged in to the domain when they're at the initial login screen, the password change is done to the user account on the local machine instead of the domain user account..

Just a thought..