GPO setting to allow domain password changes on a local computer?

[Hank Arnold]

I have several workstations that are set up for domain logons. We recently
implemented expiring passwords and users are reporting that when they
attempt to change the password they are told "You are not authorized to
change the password (or wording to that effect). Is there a local GPO
setting (or AD GPO) that will give users that ability?

 

[Denis Wong @ Hong Kong]

Hi Hank,

Go to the Active Directory Users and Computers (ie where you set up password
expiry) and go into your user's properties. Make sure the attribute User
Cannot Change Password is not selected.

br,
Denis

 

[Hank Arnold]

Thanks..... Much appreciated.........