Password problem .

[robbie]

Basically, Some users only some can't change their
passwords. We have a policy on the domain to change a
password after certain time. When the user try changing
their password when it experies. They get that they do
not have permissions to change their passwords. I have
checked the domain policy and I can't find anything that
will stop them from changing it.checked that the security
option for"additional restrictions for anonymous
connections" is not set to no access without explicit
anonymous permissions is not enable in the Local Security
Policy on anydomain controller or in the Domain
Controller Security Policy.

We r using windows 200 server and windows XP clients

Even I as an Domain Admin Can't change my password.

This is driving me mad.

Any ideas, please help Cheers Robbie.


..

 

[Steven L Umbach]

Check their account properites/account in AD to make sure that user can not
change password is not selected on these accounts. It could also be a
permision problem with AD object user access. Test to see if these users
have the problem on all machines or just certain ones since you inicate it
is not a problem for all users, that can help you isolate if it is a user or
machine problem. I would also run netdiag on the machines where this problem
is being experienced to make sure that proper communications exist to a
domain controller. Also see the KB link below about forcing kerberos to use
tcp which sometimes resolves this issue. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;258788
http://support.microsoft.com/default.aspx?scid=kb;en-us;321708
http://support.microsoft.com/?kbid=244474