Password Reset and Account Lockout Issues

[microsoft]

Hi

I am running Windows 2000 Service Pack 4, with Windows XP users. My users
are experiencing an issue where once they try to change their password, they
are either locked out of the system or the new password they are using is not
recognised. Upon checking the default domain policy no settings are set for
the following options - no account policies are defined. In addition no
settings are defined in the Default domain controller policy either, what
would be driving this issue and how can it be rectified.

Regards

 

[Meinolf Weber [MVP-DS]]

Hello Microsoft,

Password policy has tio be set on domain level on all OS version prior 2008.
What message do they get when they change there password, there will be one,
either it does not meet reuirements or succes?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[microsoft]

Varying errors

The password on this account cannot be changed at this time.

AND

you do not have permission to change, contact the system administrator

Thanks

 

[Meinolf Weber [MVP-DS]]

Hello Microsoft,

First one is based on the policy:
http://support.microsoft.com/kb/273004

Second one see here:
http://support.microsoft.com/kb/812530/

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[microsoft]

Hi

Thanks for your feedback thus far, I implemented the suggested changes in
the article. I also noticed that once users attempted their password more
than three times it would lock them out and await the administrator to
unlock, however those policies are also set to not define. Is this issue
related to the first one.

Regards

 

[Florian Frommherz [MVP]]

Howdie!

Thanks for your feedback thus far, I implemented the suggested changes in
the article. I also noticed that once users attempted their password more
than three times it would lock them out and await the administrator to
unlock, however those policies are also set to not define. Is this issue
related to the first one.

Check whether there are multiple Group Policies linked at the domain level
(root) that have Password Policy settings applied. If so, make sure you edit
the policies closest to the top (from the view in GPMC).

Cheers,
Florian

 

[Drew210]

Hi

I am running Windows 2000 Service Pack 4, with Windows XP users.  My users
are experiencing an issue where once they try to change their password, they
are either locked out of the system or the new password they are using isnot
recognised.  Upon checking the default domain policy no settings are set for
the following options - no account policies are defined.  In addition no
settings are defined in the Default domain controller policy either,  what
would be driving this issue and how can it be rectified.

Regards

First if you don’t know witch policy is applying to the computers, run
rsop.msc on one of the XP computer to find the policy.
Look under computer configuration, windows settings, security and
password policy.