Password Reset Problem

I've searched Google but either I'm using the wrong search terms or this
hasn't been addressed.

Here's the situtation: SBS2003 SP1 server on a 10 workstation LAN- all
workstations are identical- all local accounts disabled except one with
administrator privlidges- all Domain Users are local admins (don't ask why-
there's a legit reason).

Three of the workstations have continually had the following problem: user
logs onto computer and gets password expiration notice; they dutifully
change it following the prompts. When attempting to relogin with new
password the attempt is rejected and often times the user trips the account
lockout policy as a result. Occasionally the login proceeds but they have no
access to network resources and must restart- this leads to a lockout
situation.

As a result I change the user password and flag the 'user must change' box.
User then logs in and changes password according to prompts without
incident.

The whole process starts again 90 days later when the new password reaches
expiration.

Latest machine to do this shows following in local event log: errors 1006
and 1030 reported once in sequence by userenv. A check of the User
Accounts control panel lists only the local administrator account and the
advanced table is empty.

Like I said this only happens on three of ten identical workstations that
joined the domain at initial startup.



.

Relevant Pages

  • Re: IfMember & Adding Domain Group to Local Admin Group
    ... You can do this very easily with GPO. ... you should be aware that if you log in to any of these workstations ... > administrator group of the workstations only. ... does IfMember work with computer accounts or just user ...
    (microsoft.public.win2000.group_policy)
  • Re: Backup - Not Getting Any Response - Please Help
    ... My accounts log on to the domain and only the domain so they do not ... administrator rights but not called administrator, ... Same account for all workstations saves you some ...
    (microsoft.public.windows.server.sbs)
  • Re: XP Pro Administrators
    ... > I have 3 XP Pro workstations on my network. ... > priviledges beyond a power-user so I upgraded them to ... They also can't run any of the administrator ... > I've tried deleting their accounts, ...
    (microsoft.public.windowsxp.security_admin)
  • XP Pro Administrators
    ... I have 3 XP Pro workstations on my network. ... priviledges beyond a power-user so I upgraded them to ... They also can't run any of the administrator ... I've tried deleting their accounts, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: ADMINISTRATOR vs Administrator User
    ... when run on an administrator account. ... As to getting past the limitations imposed by WindowsXP ... There are very few - very very few - modern applications that require ... user accounts. ...
    (microsoft.public.windowsxp.general)
Quantcast