Password taking too long

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi, I'm trying to change the password in AD, but everytime I'll do it, I think the change it's taking too long or not doing it at all. I mean, when I put the new password is like AD need to be update or something like it.. Can somebody explain that to me? Please
Thanks
 
Edward,

What exactly does "too long" mean? I understand the "not doing it at all"
part. ;-)

First of all, which password? The password for a specific user account? If
that is the case, then where is this password change taking place and how?
Is the user sitting at his/her computer ( WINNT, WIN2000 and WIN XP ) and
hitting Ctrl-Alt-Del and selecting the 'Change Password' box. If this is
the case then here is what happens:

1) the user changes his/her password on the domain computer
2) the change is sent to the DC that authenticated the user at his/her
last logon
3) this DC then sends that password change to the DC that holds the FSMO
Role of PDC Emulator
4) the change then replicates to the other DCs ( should any additional DCs
exist )

This is supposed to happen quite quickly.....

Are there any problems with your Intra-Site replication? Are there multiple
AD Sites in your AD environment or do you have a single Site AD environment.

One way to determine this is to install the Support Tools on all of your
WIN2000 Domain Controllers ( actually, on all WIN2000 Servers ) and run both
dcdiag /c /v and netdiag /v as well as repadmin /showreps. You can find the
Support Tools in a couple of places: on the WIN2000 Server CD and on the
WIN2000 Service Pack CD in the Support | Tools folder as well as on the MS
web site. Check the downloads section.

HTH,

Cary


Edward said:
Hi, I'm trying to change the password in AD, but everytime I'll do it, I
Click to expand...
think the change it's taking too long or not doing it at all. I mean, when I
put the new password is like AD need to be update or something like it.. Can
somebody explain that to me? Please.
 
Edward,

Then I would suggest that you install the Support Tools ( better if from the
WIN2000 Service Pack CD ) and run both dcdiag and netdiag as suggested in my
initial response. Also, run repadmin /showreps. Additionally, take a look
at the following MSKB Article:

http://support.microsoft.com/?id=249256

I would also make sure that all of your WIN2000/WINXP computers are pointing
only to your internal DNS Servers.

HTH,

Cary


Edward said:
I'm using AD, and I'm making the changes in AD which is the root domain.
Click to expand...
And yes, I'm having a little problem with replication around the network.
 
Back
Top