Password expiration

[Robert]

I have a couple of annoyed users on my hand. When they're prompted to
change their passwords, they change the password but the next day they
come in and attempt to login they're prompted to change the password
again. This contiunes for a couple of days. This problem only occurs
if you're prompted to change your password. We have 2 Win 2000 dc's
runnning sp4. Our Password policy is configured to remember 10
passwords, 180 max age, 7 day min age, 6 characters, complexity and
reversible encryption is disabled. Please advise....

 

[David Brandt [MSFT]]

Couple of things to check out here.
After they have changed their pw, and get prompted to change it again the
next day, are they still able to logon using their "old" pw.
What OS are they logging on from? If uplevel clients, are there
errors/events of note in the clients event logs?
Are you seeing any replication issues between your DC's, and or any other AD
errors of note that might be part of this issue.
Have them run "set l" after logon to see what dc vaildated them at logon,
and see if you can determine if one peticular dc is repeatedly coming up.
When a change like this is made on one dc, it should write that info into
its database and then make a "best effort" attempt to contact the pdc to let
it know about the change as well, so wanting to see if you have any
replication problems as above where one dc isn't getting the updated pw info
and then is trying to do the validation.

--
David Brandt
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.