Discussion Locked

Expired password change locks account

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We are having a problem with users changing their passwords for logon to our Windows 2000 server. We have Maximum Password Age set to 42 days. When a user is advised that their password has expired, they change their password but are unable to login with their new password. When we check the user's account, it is in an "account locked out" condition. Usually we can just uncheck the "account locked out" box. Occasionally we have to change their password for them through Active Directory.
Our Password Policy settings are:
Enforce password history = 3 passwords remembered.
Maximum password age = 42 days.
Minimum password age = 0 days.
Minimum password length = 8 characters.
Passwords must meet complexity requirements = disabled.
Store password using reversible encryption = disabled.
Our Account lockout policy settings are:
Account lockout duration = 30 minutes.
Account lockout threshold = 5 invalid logon attempts.
Reset account lockout counter after = 30 minutes.
We would appreciate any help. Password changes have become a real hassle!
Thanks for any help!

3 replies

by qb

Minimun password age - A value of 0 indicates that the password can be changed immediately. This is the default. If you are enforcing password history, which you are, you should not set this value to 0.

This discussion is closed to new replies.