"You are not authorized to change your password at this ti..

Archived from groups: microsoft.public.win2000.security (More info?)

AD domain mixed mode - users off-site via T-1, no DC on site. Everyone gets
this error when prompted to change their password at logon, some get it
trying to change the password after logon. Complex passwords enforced - even
using a completely different password doesn't work.

Any ideas would be awesomely appreciated.

--

Mike Matheny
1 answer Last reply
More about authorized change password
  1. Archived from groups: microsoft.public.win2000.security (More info?)

    Maybe it is a connectivity problem with finding a domain controller or
    staying connected to it and depending on the operating system, such as
    downlevel clients, they may need to contact the pdc fsmo. The netdiag
    support tool would help if run on a domain computer [W2K/XP pro] from the
    remote site to see if the computer has proper connectivity and name
    resolution to the domain. Also check Event Viewer on the problem computers
    for any clues and enable auditing for account logon and account management
    in Domain Controller Security Policy which may provide clues via recorded
    events when this happens. A simple ping from the remote site to domain
    controllers using their fully qualified domain names may also be worthwhile.
    Users can have their accounts configured to not allow the user to change
    their password in AD Users and Computers if you have not check that
    t. --- Steve


    "Mike Matheny" <tmatheny@emsdotjscdotnasadotgov> wrote in message
    news:O6Bpoom0EHA.2624@TK2MSFTNGP11.phx.gbl...
    > AD domain mixed mode - users off-site via T-1, no DC on site. Everyone
    > gets this error when prompted to change their password at logon, some get
    > it trying to change the password after logon. Complex passwords enforced -
    > even using a completely different password doesn't work.
    >
    > Any ideas would be awesomely appreciated.
    >
    > --
    >
    > Mike Matheny
    >
    >
    >
Ask a new question

Read More

Domain Security Microsoft Windows