Windows XP + Windows 2000 Active Directory problem

R

Richard Hrubizna

Hi,
i have problem with changing user domain accounts passwords from windows xp
professional computers.
The problem is following :
1. when domain password for user expires a he must change password
during logon process then he cannot change password with following error
"You do not have permissions to change password" . This behaviour occurs
only on Windows XP Professional computers. When user log on to domain from
Windows 2000 Professional computer he will be also asked
to change his password but the process succed. Password for user is changed
a he can logon.

2. in security event log is this error ( only on Windows XP Professional
computer) :
Event id:676

Authentication Ticket Request Failed:
User Name: username
Supplied Realm Name: domain
Service Name: krbtgt/domain
Ticket Options: 0x40810010
Failure Code: 0x17
Client Address: ipaddress

3. ofcourse user have been granted right for changing his password.

4. also i changed administrative templates in group policy to windows xp
templates so i can setup additional properties for windows xp computers. So
I changed "Always wait for the network at computer startup and
logon" to enabled but this also does not helped and the user still cannot
change his password durin logon process.

5. The only way how user can change his password in Windows XP
Professional is when he is logged on but not durin logon process.

Please help.
 
F

femi

Hello Richard,
Lets start with the basics:

1. Do the XP clients have the latest service pack installed on them?
 
F

femi

Hello Richard,

Make sure that the Everyone group has been granted the CHANGE PASSWORD USER
RIGHT on the object or the container of the object. See tip 3711 at
http://www.jsiinc.com/reghack.htm . I hopes this helps

Regards
Femi
The Analyst
Macmillan Publishers Ltd
 
R

Richard Hrubizna

Yes, Everyone group has been granted permission to change password.
But it still don't work.
 
R

Richard Hrubizna

Windows XP is with Service Pack 1a and with latest updates for system and
also for internet explorer.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top