Windows XP + Windows 2000 Active Directory problem

  • Thread starter Thread starter Richard Hrubizna
  • Start date Start date
R

Richard Hrubizna

Hi,
i have problem with changing user domain accounts passwords from windows xp
professional computers.
The problem is following :
1. when domain password for user expires a he must change password
during logon process then he cannot change password with following error
"You do not have permissions to change password" . This behaviour occurs
only on Windows XP Professional computers. When user log on to domain from
Windows 2000 Professional computer he will be also asked
to change his password but the process succed. Password for user is changed
a he can logon.

2. in security event log is this error ( only on Windows XP Professional
computer) :
Event id:676

Authentication Ticket Request Failed:
User Name: username
Supplied Realm Name: domain
Service Name: krbtgt/domain
Ticket Options: 0x40810010
Failure Code: 0x17
Client Address: ipaddress

3. ofcourse user have been granted right for changing his password.

4. also i changed administrative templates in group policy to windows xp
templates so i can setup additional properties for windows xp computers. So
I changed "Always wait for the network at computer startup and
logon" to enabled but this also does not helped and the user still cannot
change his password durin logon process.

5. The only way how user can change his password in Windows XP
Professional is when he is logged on but not durin logon process.

Please help.
 
Hello Richard,
Lets start with the basics:

1. Do the XP clients have the latest service pack installed on them?
 
Hello Richard,

Make sure that the Everyone group has been granted the CHANGE PASSWORD USER
RIGHT on the object or the container of the object. See tip 3711 at
http://www.jsiinc.com/reghack.htm . I hopes this helps

Regards
Femi
The Analyst
Macmillan Publishers Ltd
 
Yes, Everyone group has been granted permission to change password.
But it still don't work.
 
Windows XP is with Service Pack 1a and with latest updates for system and
also for internet explorer.
 
Back
Top