Unable to change user password
I currently have ninety users running Windows XP SP2 within a Windows 2003 domain and four users are unable to change their passwords. The error they get when attempting to change is Access Denied. Their passwords can be changed within the AD and no services are affected other than the fact that they cannot change there passwords?. I have Exhausted all information on the Internet regarding this problem to no avail.
Software/Hardware used:
Software/Hardware used:
ASKED:
January 23, 2008 5:16 PM
UPDATED:
January 28, 2008 6:00 PM
RELATED QUESTIONS
- Can I audit Windows active directory passwords to meet complexity rules and not let users have weak passwords?
- EIM/SSO on System i with Password *None
- OWA url's require me to re enter username and password
- How let remote AD users change their own SharePoint passwords
- Why would Outlook 2010 appointment color codes be lost after updating web mail password?
Answer Wiki:
In AD, open the user, Go to Account tab and under account options. Uncheck User can change password. They should be able to change passwords now.
** edit by Buddy Farr **
I believe Jirvine meant to say "remove checkmark from USER CANNOT CHANGE PASSWORD". but there is another setting. when you have the account open and you find that the checkmark described above is unchecked then also go to the SECURITY tab and make sure that the CHANGE PASSWORD option has a checkmark in the ALLOW column and DOES NOT have the DENY checked. if the DENY is checked then it does not matter whatever else is checked it will not allow the user to change their password.
**end edit **
To see all answers submitted to the Answer Wiki: View Answer History.
The only thing that I could think of is that maybe when you created those accounts you selected the user cannot change password feature, I know that I have done this a few times without realizing it.
I am sure that you have already checked this but if you have not there you go, it’s worth checking it out.
Thanks
CG._
No setting are checked within Account options?
Check the permissions on the security of tab for each user in ADUC and make sure that they have permission to their own objects.