change password every time you log on

[Curtis]

We have a problem where users are logging onto our domain
with either Windows XP clients or Windows 2000 Pro clients
and everyday it asks them to change their password,
however when running from the command prompt net user
userX /domain it tells you that the password only expires
in a months time.

Any feedback on the solution to this would be appreciated.

 

[Steven L Umbach]

Double check the policy for Domain Security Policy unless you have another
GPO with those settings defined for the domain that is higher in the
priority list. Using " net accounts " on a domain controller may also help
to see what is being applied. Be sure to not have block inheritance
configured on the domain controllers container. Also run dcdiag on the
domain controllers to check for general health looking for any failed tests
and netdiag on one of the computers experiencing the problem. It may prove
interesting to manually reset the password in ADUC on one othe users on a
W2K computer to see if the problem persists. -- Steve