password change prompt

[Tester]

Hello there,
Do you know of any reason why users would not get the password change
prompt before their password will expire? Machines are XP Pro and AD
controller is W2K3 stas. Passwords are set to expire every 3 months.
Thank you, T

 

[Meinolf Weber [MVP-DS]]

Hello Tester,

Did you check the following policy:
Computer configuration, windows settings, security settings, local policies,
security options, in the right pane "Interactive logon: Prompt user to......."

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[Tester]

Hello Tester,

Did you check the following policy:
Computer configuration, windows settings, security settings, local policies,
security options, in the right pane "Interactive logon: Prompt user to........"

Best regards

Meinolf Weber

Hi there,
It is checked, se to 14 days on the domain controller.
Is it possible users do not reboot and leave ther machine locked over
night and consequently do not get the prompt OR they get logged on
using cached credentials? I have both W2K Pro and XP Pro clients with
same problem.
Thank you, T

 

[Meinolf Weber [MVP-DS]]

Hello Tester,

Make sure that you have enabled following policy for the XP machines:

Computer Configuration, Administrative Templates, System, Logon, in the right
pane "Always wait for the network at computer startup and logon"

Without that policy it can happen that you logon with cached credentials
and work local instead of the domain.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm