There are two things that may cause this depending on the client. If this is for XP
Pro or other downlevel client check that on your domain controllers via Local
Security Policy "effective" settings that the security option for additional
restrictions for anonymous connections is not set to "no access without explicit
anonymous permissions" . The other problem is that that the everyone group does not
have change password permissions to the users container. First run netdiag on the
domain controller followed by dcdiag to check for proper configuration and if that
checks out run netdiag on one of the client computers [assuming W2K/XP Pro] . Those
tools are on the install disk in the support/tools folder where you will have to run
the setup. You will want to look for failed tests/errors/warnings in particular for
dns, dclist, and domian membership. Dns configuration problem are the root cause of
many AD problems. See the link below for more info. --- Steve
http://support.microsoft.com/default.aspx?scid=kb;EN-US;258788
http://support.microsoft.com/default.aspx?scid=kb;en-us;291382 --- important
info in dns
