Password GPO is not working... apparently.

  • Thread starter Thread starter Jack Black
  • Start date Start date
J

Jack Black

Hi All

I have an W2K native mode domain. I run a domain level GPO that sets the
password miminum change to "0" days. Plus, it expires in "120" days.

However, whenever a user attempts to change their password they get this
error "Unable to change password at this time."

Anyone have any ideas on this error?

Thank you, Jack
 
Jack,

It is possible that you have also 'enabled' the setting that does not allow
the users to change their passwords until prompted by the system ( I
*believe* that is when your password actually expires and NOT when they
receive the 'Your password is going to expire in xx days. Would you like to
change it now?' pop up ).

Please take a look at the following MSKB Article:

http://support.microsoft.com/?id=309799

Also, make sure that all of the computers have the same policy. Go to your
Domain Controllers and enter net accounts at the command prompt. Make sure
that the information is the same on all Domain Controllers. This
information should also be the same as your Domain Security Policy. Then,
go to some clients and make sure that when you do net accounts at the
command prompt that this information is the same.

Does this help you?

Cary
 
Back
Top