[skemp]

Hi

I'm having a small issue on a Windows 2003 Std DC environment, I have a WinXP and a normal user login to it. When the user is prompted to change the password because the account is about to expire, user click YES on the prompted message and type the new password and they get error message that user does not have the priviledges to change password. However when they login normally and hit CTRL-ALT-DEL and change password there and it works. This is a weird one and I couldn't figure it out why yet.

Anyone with any thoughts ?

Thanks

[ahinson]

They may not be meeting the password complexity requirements.

Are they entering exactly the same password once they're beyond the logon screen?

[skemp]

No password complexity is enable in the GPO.
Store password using reversible encryption is disable.
Enforce password history is 1
maximum password age is 42 days
minimum password age is 0
minimum password length 0 chars

[ghemant]

Hi,
is this user is added in to local machine's user group(power user etc.) ?!


Regards

[wullieb1]

I can't see how adding a user to the power users group will help.

Does the user have the correct privileges on his/her user prfile in AD???

[skemp]

Yes user has correct privileges and the user has local admin rights.

This problem only happen when they got prompted to change password.

[ghemant]

Hi,

I'm having a small issue on a Windows 2003 Std DC environment, I have a WinXP and a normal user login to it. When the user is prompted to change the password because the account is about to expire, user click YES on the prompted message and type the new password and they get error message that user does not have the priviledges to change password. However when they login normally and hit CTRL-ALT-DEL and change password there and it works. This is a weird one and I couldn't figure it out why yet.

Hi,
is this user is added in to local machine's user group(power user etc.) ?!

by asking this question i wants to ensure that if another user with the same user name is added to LOCAL Machine , if not how they are able to log in normally (can be local and not in domain ?! , this makes me confuse) and if domain user has proper permission to change the password for !


Regards

[pcking999]

here are 2 kb articles that may help

http://support.microsoft.com/?kbid=328817
http://support.microsoft.com/?kbid=258788

[skemp]

Finally I found the problem. I have this problem with all SP1 and no SP1 for WinXP boxes but as soon as I installed SP2 this problem gone away. Maybe there is a fix in XP SP2 somewhere.

Anyway thanks for all the help and input.

[biggles77]

I'm happy you have solved the problem, it has been a while, hasn't it! Thanks for posting back letting us know you solved it.