Re: Users cannot change passwords

From: Steven L Umbach (sumbach_at_nospam-ameritech.net)
Date: 02/05/04 

Date: Thu, 05 Feb 2004 17:21:39 GMT

There are two main reasons for this. One is that in Domain Controller
Security Policy [or possibly local on a domain controller] the security
option for addtional restrictions for anonymous connections is set to no
access without explicit anonymous permissions, which mainly affects non W2K
clients including XP Pro. The other is that the everyone group does not have
change password permissions to the user object in Active Directory. See
links below for more info. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;258788
http://support.microsoft.com/default.aspx?scid=kb;en-us;823659
http://support.microsoft.com/default.aspx?scid=kb;en-us;273004

"Jason Cochrane" <jason@*spam*dpskc.com> wrote in message
news:O6iB$UA7DHA.3288@TK2MSFTNGP11.phx.gbl...
> When the password expiration date on the user passwords expires, the user
is
> prompted to change their password. When the user tries to change the
> password, they recieve the following error message:
>
> You do not have permission to change this password
>
> Any ideas on how to correct this? I have looked for a group policy, but
did
> not find anything that looked like it could affect this, but I am not
sure.
>
> thanks,
>
> jason
>
>

Relevant Pages

  • Re: Help with GPO problem! PLEASE!!
    ... Can you create a new GPO?? ... If so use it to compare permissions to the two ... > Configuration information could not be read from the domain controller, ... Failed to open the Group Policy Object. ...
    (microsoft.public.windows.group_policy)
  • 1030 and 1058 Errors on 2K3 domain controller
    ... I'm having some issues the last few days with 1030/1058 errors on a Windows ... 2003 domain controller. ... Windows cannot query for the list of Group Policy objects. ... Enterprise Domain Controllers - Full Permissions ...
    (microsoft.public.windows.group_policy)
  • Re: Error convert applying security template
    ... > How did you try to change permissions? ... Did you manually change ... > template into Domain Controller Security policy or another GPO?? ...
    (microsoft.public.win2000.security)
  • Re: Problems since SP1 (Server 2003) - 2nd request for help
    ... You are doing the correct thing by changing the setting in the Domain Controller Security policy, but the changes are not taking effect. ... On the Group Policy tab, is there a check in the No Override column? ... You can check if it is Disabled by opening up Active Directory Users & Computers, right-click on the "Domain Controllers" OU and choose Properties. ...
    (microsoft.public.windows.terminal_services)
  • Re: Problems since SP1 (Server 2003) - 2nd request for help
    ... Services in the Domain Security Policy? ... Administrators and Remote Desktop Users - I removed then did GPupdate /force ... Group Policy tab, is there a check in the Disabled column? ... Check if the Domain Controller Security Policy has been ...
    (microsoft.public.windows.terminal_services)