Hi Brent,
If you create a new user account and you click to select the "User must
change password at next logon" check box, the user may receive the
following error message when he/she tries to change the password during the
logon process:
You do not have permission to change your password.
This error message occurs if the Everyone group or Authenticated Users
group does not have the correct permissions to gain access to the domain
controllers from the network.
To resolve this issue:
1. Start the Active Directory Users and Computers tool, right-click the
Domain Controllers container, and then click Properties.
2. Click the Group Policies tab, click the Default Domain Controllers
policy, and then click Edit.
3. Expand the following items in the policy:
Computer Configuration
Windows Settings
Security Settings
Local Policies
User Rights Assignment
4. Double-click "Access this computer from the network", click Add,
click Browse, and then add Everyone and Authenticated Users.
5. Click OK in each dialog box or window to quit the policy editor.
Close the domain controller properties, and then quit Active Directory
Users and Computers.
6. At a command prompt, type "secedit /refreshpolicy machine_policy
/enforce" (without the quotation marks), and then press ENTER.
=========
This posting is provided "AS IS" with no warranties, and confers no rights.
Top 10 Windows XP Security Questions Answered:
http://www.microsoft.com/technet/newsgroups/default.asp?url=/technet/newsgro
ups/nodepages/sectop10.asp
=========
Paul Hayes, MCSE
Product Support Services
Microsoft Corporation
(e-mail address removed)
