Change password - access denied

[Andreas]

All WinXPsp1 clients (all patches) on our network are joined to a
win2ksp4 srv domain (all patches).

User passwords are set to expire after 42 days and 14 days before the
password expires Windows will, at login, start asking the user if it
wants to change the password now or wait.

Problem:
If user chooses to change now and enter a valid password (they do this
correctly, I have confirmed) they receive an Access Denied message.

However, if a user chooses not to change its password at this time and
logs into windows and then attempts a password change (when logged in)
it is succesful.
This, of course, will not work if the password has expired so I would
like to know if there is a way to fix it and allow users to change
their password without being logged in.

Best regards
Andreas Warberg

 

[David Adner]

I know in NT4 you'll see similar behavior if the RestrictAnonymous value
is too strict. You may want to check this setting on your DC's to see
if it's set to "No access without explicit anonymous permissions".

 

[Andreas]

Thank you. This could very well be the issue - I will try my luck with
less restrictions on anonymous users.

-Andreas