You do not have permission to change your password

[JRockwood]

I am having an issue when passwords are about to expire. This issue
goes away once the password is expired though.

User logs in and is prompted that his/hers password is going to expire
in xx amount of days. The user tries to change the password but gets
the "You do not have permission to change your password" error.

Something in my group policy is causing this issue. I can move the user
to a different, less restrictive OU, shut the computer off and log the
user in and it will allow them to change the password.

One user complained about this and said that they were not able to
change the password until the password had expired and "you must change
the password" message came up. So i tested this out on a few other
users and the results are the same.

Any suggestions?

Workstations : XP
Windows 2000 domain

 

[Jerold Schulman]

I am having an issue when passwords are about to expire. This issue
goes away once the password is expired though.

User logs in and is prompted that his/hers password is going to expire
in xx amount of days. The user tries to change the password but gets
the "You do not have permission to change your password" error.

Something in my group policy is causing this issue. I can move the user
to a different, less restrictive OU, shut the computer off and log the
user in and it will allow them to change the password.

One user complained about this and said that they were not able to
change the password until the password had expired and "you must change
the password" message came up. So i tested this out on a few other
users and the results are the same.

Any suggestions?

Workstations : XP
Windows 2000 domain

You probably have minimum password age set to high. Try setting it to 1.
Computer Configuration / Windows Settings / Security Settings / Account Policies / Password Policy
in the Default Domain Group Policy.



Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com

 

[In seek of answers]

It apears to be something in the users profile on the local machine. If
i have a user log onto a machine that he or she has never logged on to
before and it creates the profile then i do not have any problems.

So the fix appears to be, delete thier profile on the machine.

Would anyone else know of a better way to resolve this issue?