Re: permission to change password denied

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Al Mulnick (amulnick_No_SPAM_at_ncDOTrr.com)
Date: 06/24/04 

Date: Wed, 23 Jun 2004 21:05:26 -0400

That's not expected behavior though. The expected behavior is that you have
a valid id and password that just happens to have expired and needs to be
updated.
You should get on the network with the initial password. You may want to
check the wire to see what's going on during that logon sequence to see if
you've set something incorrectly.

Al

<anonymous@discussions.microsoft.com> wrote in message
news:1e8ea01c45549$16178430$a001280a@phx.gbl...
> THere are no messages logged at the DC or on the local
> machine, other than the success audit where I, as admin,
> change the account to require password change at login.
>
> I think that entering the first (valid) password does not
> authenticate the user, and that the subsequent
> communications are refused since they're not authenticated.
>
> This is not a new observation, I've not ever had this
> work. Perhaps it uses a different means of communicating
> with the DC in this case ? All other logon processes are
> fast and reliable, and the password can be changed after
> login without difficulty.
>
> Dave
> >-----Original Message-----
> >So, if the user is required at first logon to change
> password, they enter in
> >the original password provided (which authenticates
> them), are told to
> >change the password, follow the prompts and get access
> denied?
> >What gets logged at the DC? What workstation OS are the
> using and what gets
> >logged there?
> >
> >Al
> >
> >
> >"dlbrum" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:1e53401c45534$d4e982b0$a401280a@phx.gbl...
> >> If I check the box to require password change at first
> >> logon, or in the case of a password expiring, the users
> >> are prompted to change the password (before logging on).
> >>
> >> When they follow the prompts, they are not able to
> change
> >> a password, and get the "you do not have permission to
> >> change" message. If they do logon first, they are able
> to
> >> change passwords at the CNTL-ALT-DEL "Windows Security"
> >> dialog without incident.
> >>
> >> The machines are domain joined, DCs are win2k3 and
> win2k.
> >>
> >> This is inevitably a trouble call.
> >>
> >> TIA for ideas,
> >>
> >> dave
> >
> >
> >.
> >