Password GPO is not working... apparently.

[Jack Black]

Hi All

I have an W2K native mode domain. I run a domain level GPO that sets the
password miminum change to "0" days. Plus, it expires in "120" days.

However, whenever a user attempts to change their password they get this
error "Unable to change password at this time."

Anyone have any ideas on this error?

Thank you, Jack

 

[Cary Shultz [A.D. MVP]]

Jack,

It is possible that you have also 'enabled' the setting that does not allow
the users to change their passwords until prompted by the system ( I
*believe* that is when your password actually expires and NOT when they
receive the 'Your password is going to expire in xx days. Would you like to
change it now?' pop up ).

Please take a look at the following MSKB Article:

http://support.microsoft.com/?id=309799

Also, make sure that all of the computers have the same policy. Go to your
Domain Controllers and enter net accounts at the command prompt. Make sure
that the information is the same on all Domain Controllers. This
information should also be the same as your Domain Security Policy. Then,
go to some clients and make sure that when you do net accounts at the
command prompt that this information is the same.

Does this help you?

Cary