Permission to change passwd

  • Thread starter Thread starter jasont
  • Start date Start date
J

jasont

We are not aloud to give users thier password anymore, so
we have them all set for user must change password at
next login. But when the user logs in and try's to type
in a new password it says that they do not have
permission to change it. So what do i ahve to change to
give my users permission to change there passwords when
the box to change there password pops up
 
There can be several reasons that this is happening. This article
has some good troubleshooting steps:

258788 Cannot Change Password in Windows Without Logging on to Domain
http://support.microsoft.com/?id=258788

Also this problem can occur if the following conditions are true:

- Your computer is part of a Microsoft Windows 2000 domain. -and-
- The "User must change password at first logon" option is enabled
for
your user account. -and-
- The RestrictAnonymous value in the
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa registry
key of
the Windows 2000 domain controller is set to 2

If this is the case then change the value to 0.

This error message can also occur if the Everyone group or
Authenticated Users group does not have the correct permissions to
gain access to the domain controllers from the network.

To resolve this issue:

1. Start the Active Directory Users and Computers tool, right-click
the
Domain Controllers container, and then click Properties.

2. Click the Group Policies tab, click the Default Domain Controllers
policy, and then click Edit.

3. Expand the following items in the policy:


Computer Configuration

Windows Settings

Security Settings

Local Policies

User Rights Assignment

4. Double-click "Access this computer from the network", click Add,
click Browse, and then add Everyone and Authenticated Users.



Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.
 
Back
Top