having a password policy issue

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Katrina Neumann (anonymous_at_discussions.microsoft.com)
Date: 03/16/04 

Date: Tue, 16 Mar 2004 05:56:47 -0800

Trying to have a password policy where the users can not
change their password except when required by the OS. Have
followed 309799 to the letter. Users getting the Password
will expire in xx days. Would you like to change your
password now? pop-up. They select Yes and try to change
but are given the you are not allowed to change your
password now message. They get this message everytime
they logon and are getting angry. If I disable the
setting from 309799 everything is okay. What constitutes
required by WIN2000? We are not within the Minimum
Password Age period. Default Domain Policy seems to have
inheirited the settings from Password so the minimum
password age is not set to disabled or not defined.

Using net accounts on each workstation ( WIN2000 SP3 and
SP4 ) shows all settings are same as policy. Have two
WIN2000 SP4 domain controllers in one site. No issues
with ad replication.

Katrina
       

Relevant Pages

  • Re: scripted logon
    ... Why can't you launch all the scripts from a Group Policy based Logon script. ... Here's the policy settings (I sure hope word wrap doesn't mess it up too ... Windows Components/Windows Installer ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... Server Security and Auditing Policy ... This list only includes links in the domain of the GPO. ... The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • RE: Bypassing Windows 2000 Domain Password settings
    ... My original issue was not just with minimum password age, ... There are 6 settings under Computer ... Controller policy was affecting my end result. ... If you tell it to block inheritance, ...
    (Focus-Microsoft)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... > Server Security and Auditing Policy ... > This list only includes links in the domain of the GPO. ... > The settings in this GPO can only apply to the following groups, users, ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Update Problem (SYSVOL access via UNC)
    ... >> Server Security and Auditing Policy ... >> The settings in this GPO can only apply to the following groups, users, ... >> Windows Firewall: Allow file and printer sharing exception Enabled ...
    (microsoft.public.win2000.group_policy)