Windows Forum

Ask something
Discussion Locked

Users cannot change password

0 helpful
16 replies

by netlion

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We have created a test lab copy of our environment. I dumped a copy of production user accounts using ADDUSER and used it to create copies of the same accounts in the TEST domain. (All PWs set to the same.) As users come into the test lab and tryto change their password it refuses to let them. GPOs are setup the same as the production network. Am I overlooking anything obvious?
Thanks!

16 replies

by wmr029

Do you have a minimum password age policy (ie a user must wait x days before letting a password change occur?

by fred07

Also, You may need to have ADMIN loged in to okay any password changes. Remember ADMIN must know all passwords on a net.

by netlion

No, password settings in GPO are from Default Domain level and are not changed in downlevel GPOs.

by beermonster

Hi,
Hi, sorry if this is a bit simplistic but - I don't suppose the 'user can't change password' property is ticked on the sser accounts?

by dwdino

Sorry, but this is in response to Fred, YOUR NUTS!!

No one should know a password but that user. Admins can change the password at will, so who cares what it is. And if a user forgets, reset to temp pword and immediately have user change.

by jkaras

ROFL....sniff...sniff....ROFL....I think I'm laughing so hard I'm crying!! Nice one DWDINO that made my day.

by dwdino

Now seriously:

1) Verify the user account domain.
2) Are there any erros received, or does changed password not take effect?
3) Can the test domain see the real domain?
4) Are test and real domain named the same?
5) Open AD Users & Computers and change one accounts pword. Login with this account (see if new pword takes). Then attempt to change pword by using Ctrl+Alt+Delete.

by netlion

The password change comes back with an error that the new password does not meet minimum length even if you create a password with more characters than the minimum. The Test domain is a separate stand-alone environment with a different name than production and behind a router that doesn't allow access. Changing passwords using AD U&C works just fine. Changing by using Ctrl+Alt+Del is what doesn't work for users. Very strange.

This discussion is closed to new replies.