Software

Ask something
Question Locked

Password Trouble

0 helpful
7 replies

by network5831

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I've been trying to figure this out for days without luck.
A. I have 2 seperate domains running Win2003 sr2. The default domain password policies are identical. (180 days)

B. User 1 had an AD account on domain B. A new AD account was created for this user on domain A. The domain B password is set not to change and the domain A password was forced to change at first logon. This was not a problem.

C. FYI - There is no trust between the domains and they reside in different forests.

D. (issue) The user logs into domain A AD and connects to domain B for network shares without issue. However, when the user opens Outlook they are told they have 4 days to change their password. I don't know where this is coming from.

Any ideas or advise?

7 replies

by patb071

It must be e-mail password it is looking for. What are you using for e-mail service?

by network5831

We use MS Exchange. This wasn't an issue until last week. They were working without issue for about a month. I've gone as far as resetting the domain B password to be the exact same one as on domain A, but the issue remains.

by cg it

logged on to domain A and there is no trust between domains?

The desgin of a domain [or a workgroup] is that they are security boundries. Only those who have accounts can log on. If a user logs on to domain A then they can not automatically access shared resources in another domain unless a trust relationship has been established between domains and that user has been granted the rights and permissions to access the shared resources.

so unless the user that logs on to domain A uses remote access to domain B and provides domain B credentials, they would be denied access.

Note: if this is the senario, domain A user uses remote access to domain B and domain B requires password changing then the requirement is for the domain B credentials, not the remote access users home domain.

by network5831

We have them using 'Managed Passwords' in the advanced section of the control panels user accounts. They log into A and authenticate, then connect to B via drive mappings. (hard coded) The issue we're having is trying to find out what is causing the password reset message when opening Outlook.

by cg it

again domains and workgroups are security boundries. only those users that have an account can log in and gain access to resources.

So I will ask again, "how" with the emphasis on the "how", does the user in domain A access shared resources in domain B?

The mapped drive doesn't mean anything because there has to be a connection between domain A and domain B and credentials have to be used to make that connection.

Hint: It is those credentials that is probably causing the problem because the domain policies apply to the accounts that are part of that domain.

by kenone

that when you created the new account in domain A you didn't setup the new Outlook account to use the windows password.
I don't think you understand your topology either.

This discussion is closed to new replies.