Windows Forum

Ask something
Discussion Locked

Some users can't change passwords

0 helpful
5 replies

by whatme?

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

W2K AD domain w/ one domain policy. All users in group (domain users)Some users can change their passwords....some can't. All of their user profiles allows passwords to never expire. What do I have to do to get those that can't change their passwords... to do it.
NO...there is NOT anther policy

5 replies

by sativocomputerservices

I would start by checking the obvious. Make sure the option is not set under the user onbject preventing users from chnaging their own password. Also, if connections are intermittent on the LAN and users are logging on with cached credentials, they will not be allowed to change their password. If you are running Novell or another gina at first, try changing the client login priority order... not sure I have enough to go on in this one.

by cg it

just open up active directory users and computers from administrative tools. double click on the user accounts that can't change the password which will open up user account properties page. click on the account tab. Under account options verify that the user cannot change password box is unchecked. If it is, uncheck it then click ok. close out all windows.
The other area that may have been enabled is in Group Policy. Group Policy has Disable change password for users under user configuration. If domain group policy for a particular OU/group has been set with disable change password applied, then you'll have to disable that. Note: if group policy was used to disable change of password and you disable it default group policy refresh interval is 90 minutes with a + - 30 minute variance. So changes won't take effect immediately.

May take a bit for the changes to take effect due to domain GP refresh interval [default of 90 mint.

This discussion is closed to new replies.