Windows Forum

Ask something
Discussion Locked

Changing Network passwords

0 helpful
11 replies

by abrar hazarika 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I want the user to change their passwords. When i create an account with the tab "User must change their password at next logon" checked the user gets the prompt to change the password.

But when he actually tries to change from the client machinethen permission is denied.

What could be wrong? Is there other way to change passwords for an user account from the client machine.

Any help will be appreciated.

11 replies

by bart.van.nynatten

Hi,

You can try to disable the option of "changing the password at first logon" at let the user login to the network, witht the first password you specified. Once he is logged in, you can ask him to use the CTRL+ALT+DEL option and select change password. Normally this should work, because I had the same thing. Do you have more than 1 domain and if yes are you using some trust relationships ?

by abrar hazarika

Hi

Thanks but the problem is the users want to change their network passwords from their own machines which runs on Win98 or Me. So how to go about that. How do users normally change their network passwords.

We have only a single domain with1 PDC and 1 BDC and 25 clients.
It is not possible from control panel-passwords-change network passwords, because same problem of access denied crops up. There is a way for a user to change his own password from network logon screen. Any idea.

Regards

by valachi

There is not enough data to answer throughly but I'm going to try. Check the permissions for the %systemroot% directory (the System should have full control). Check the synchronization between the PDC, BDCs etc.Check the secure channel between BDC and PDC and, if it is broken, use "netdom" from the resource kit to reset it. Restart the Netlogon service. Check the logs maybe you can find more and, for every error or warning, see in the Resource Kit documentation what it means. Try to use the "net user" command to change the password at the command line.

by abrar hazarika

Hi

Thanks but the problem is the users want to change their network passwords from their own machines which runs on Win98 or Me. So how to go about that. How do users normally change their network passwords.

We have only a single domain with 1 PDC and 1 BDC and 25 clients.
It is not possible from control panel-passwords-change network passwords, because same problem of access denied crops up. There is a way for a user to change his own password from network logon screen. Any idea.

Regards

by abrar hazarika

Hi

Thanks to both of you but the problem is the users want to change their network passwords from their own machines which runs on Win98 or Me. So how to go about that. How do users normally change their network passwords.

We have only a single domain with 1 PDC and 1 BDC and 25 clients.
It is not possible from control panel-passwords-change network passwords, because same problem of access denied crops up. There is a way for a user to change his own password from network logon screen. Any idea.

Regards

by valachi

I don't know if you have set the Access Control to the User Level (if it is at the Share Level the user can still authenticate in the domain but it's not the same). To have the full functionality, set it to User Level and provide the name of the domain against which the users will be authenticated.

by abrar hazarika

Thanks

I think I am not very clear. Let me clarify.

It is in the user level. And the users are fully authenticated and is working fine. The problem is client machines are running Win 98 or Me. And each user having their username and passwords set by me(new admin)in the NT4 machine. So I the passwords for every user. Now the user wants to change his passwords for his own user account. How to go about that (without coming to the DC console) from his own machine.

by green lantern

This is not an uncommon problem. When you select "User must change password at next logon" you must also DESLECT "User must logon to change password". You will find this at USer Manager for Domains / Policy at the lower left. By default this is checked. De-select this and your users can logon to change their password. With this default and your choice of "User must change password at next logon" you setup a circle where the user cannot logon because the password is invalid (expired) yet hemust logon to change his password. A no win scenario.

by abrar hazarika

Thanks Ralph

I solved the problem long ago and found out the vicious cycle of "change password and access denied".
But still you are exactly right at the point.
Thanks again for taking the trouble.

This discussion is closed to new replies.