Re: permission to change password denied
anonymous_at_discussions.microsoft.com
Date: 06/18/04
- Next message: ptwilliams: "Re: users can't change their passwords"
- Previous message: Peter L. Thomas: "Connecting Azman to file system ACLs"
- In reply to: Al Mulnick: "Re: permission to change password denied"
- Next in thread: Al Mulnick: "Re: permission to change password denied"
- Reply: Al Mulnick: "Re: permission to change password denied"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 18 Jun 2004 08:29:46 -0700
THere are no messages logged at the DC or on the local
machine, other than the success audit where I, as admin,
change the account to require password change at login.
I think that entering the first (valid) password does not
authenticate the user, and that the subsequent
communications are refused since they're not authenticated.
This is not a new observation, I've not ever had this
work. Perhaps it uses a different means of communicating
with the DC in this case ? All other logon processes are
fast and reliable, and the password can be changed after
login without difficulty.
Dave
>-----Original Message-----
>So, if the user is required at first logon to change
password, they enter in
>the original password provided (which authenticates
them), are told to
>change the password, follow the prompts and get access
denied?
>What gets logged at the DC? What workstation OS are the
using and what gets
>logged there?
>
>Al
>
>
>"dlbrum" <anonymous@discussions.microsoft.com> wrote in
message
>news:1e53401c45534$d4e982b0$a401280a@phx.gbl...
>> If I check the box to require password change at first
>> logon, or in the case of a password expiring, the users
>> are prompted to change the password (before logging on).
>>
>> When they follow the prompts, they are not able to
change
>> a password, and get the "you do not have permission to
>> change" message. If they do logon first, they are able
to
>> change passwords at the CNTL-ALT-DEL "Windows Security"
>> dialog without incident.
>>
>> The machines are domain joined, DCs are win2k3 and
win2k.
>>
>> This is inevitably a trouble call.
>>
>> TIA for ideas,
>>
>> dave
>
>
>.
>
- Next message: ptwilliams: "Re: users can't change their passwords"
- Previous message: Peter L. Thomas: "Connecting Azman to file system ACLs"
- In reply to: Al Mulnick: "Re: permission to change password denied"
- Next in thread: Al Mulnick: "Re: permission to change password denied"
- Reply: Al Mulnick: "Re: permission to change password denied"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
