User cannot change password on this account error

[Mfana]

We are running Active directory on Win2k in a single
domain. I disabled the default domain policy as it caused
accounts to be locked after this setting was modifed. The
new policy password setting are: minimum password age 27,
max pwd age 30 but when users are reminded to change their
password in x number of days before expiry, they get an
error that " password on this account cannot be changed at
this time". Please help as I have no clue how to solve
this problem.

rgds
(e-mail address removed)

 

[Mike Cason]

Most likely, your users are getting prompted to change their passwords
before 27 days have passed - I believe the default is 14 days before
password expiration, which would be 11 days before they are allowed to
change their password. Either shorten the reminder time, or shorten the
minimum password age. Most companies that require a minimum password age of
more than a day or two (which is generally enough to prevent most user from
recycling passwords) set the reminder to max age-min age, which, in your
case, would be three days.