my client are not able to change their domain password.
error unable to change password
They exist in a windows 2000 ad domain, as far as i can see there is no
policy preventing the clients from changing their domain logon password
can anyone point me in the right direction, thanks in advance

RE: change client password by ahmadifx

ahmadifx
Sat Nov 04 09:28:01 CST 2006

Hi Jimi,
Its mostly likely a policy only thats preventing them.. You try changing it
for them..

Regards
Ahmad
Microsoft Student Partner - India

"jimi hendrix" wrote:

> my client are not able to change their domain password.
> error unable to change password
> They exist in a windows 2000 ad domain, as far as i can see there is no
> policy preventing the clients from changing their domain logon password
> can anyone point me in the right direction, thanks in advance

Re: change client password by Steven

Steven
Sat Nov 04 14:54:45 CST 2006

Is this new or ongoing behavior?? The first two things I would check is that
the properties in the user's account in ADUC does not show that can not
change password is enabled and that the minimum password age is not set too
high which generally does not need to be more than two days. You can run the
command net accounts on a domain controller to quickly see that setting
which usually is set by Domain Security Policy unless you have configured
additional GPOs linked to the domain container that are higher in the
priority list than the default domain GPO that have minimum password age
configured. Also make sure that the client computers can contact a domain
controller or the password change will fail. The support tool netdiag will
show errors/warnings if a domain controller can not be found or contacted
when run on a domain client computer.

Steve


"jimi hendrix" <jimihendrix@discussions.microsoft.com> wrote in message
news:D2AA3C1D-9010-4AFE-BA37-BA5481EF57E0@microsoft.com...
> my client are not able to change their domain password.
> error unable to change password
> They exist in a windows 2000 ad domain, as far as i can see there is no
> policy preventing the clients from changing their domain logon password
> can anyone point me in the right direction, thanks in advance



Re: change client password by jimihendrix

jimihendrix
Mon Nov 06 04:33:01 CST 2006

OKay,..I checked all the policies none are preventing the clients from
changing their passwords.
I made 50 attempts and just 1 succeeded in changing the client password.
I run the netdiag tool:

Microsoft Windows 2000 [versie 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.

C:\Documents and Settings\sjefr>netdiag /test:DsGetDc

..........

Computer Name: LT03
DNS Host Name: lt03.fujicolor.nl
System info : Windows 2000 Professional (Build 2195)
Processor : x86 Family 6 Model 8 Stepping 6, GenuineIntel
List of installed hotfixes :
KB329115
KB823182
KB823559
KB824105
KB824141
KB825119
KB826232
KB828035
KB828741
KB828749
KB833407
KB835732
KB837001
KB839643
KB839645
KB840315
KB840987
KB841356
KB841533
KB841872
KB841873
KB842526
KB842773
KB871250
KB873339
KB883939-IE6SP1-20050428.125228
KB885250
KB885835
KB885836
KB888113
KB889293-IE6SP1-20041111.235619
KB890046
KB890175
KB890859
KB891711
KB891781
KB893066
KB893756
KB893803v2
KB896358
KB896422
KB896423
KB896424
KB896688-IE6SP1-20051004.130236
KB897715-OE6SP1-20050503.210336
KB899587
KB899589
KB900725
KB901017
KB901214
KB902400
KB904706
KB905414
KB905495-IE6SP1-20050805.184113
KB905749
KB905915-IE6SP1-20051122.175908
KB908519
KB908523
KB908531
KB911280
KB911564
KB911565
KB912919
KB913580
KB914388
KB914389
KB916281-IE6SP1-20060526.162249
KB917008
KB917159
KB917422
KB917537
KB917734_WMP7
KB917734_WMP9
KB917736
KB917953
KB918899-IE6SP1-20060725.123917
KB920670
KB920683
KB920685
KB920958
KB921398
KB921883
KB922616
KB923191
KB923414
KB924191
KB925486-IE6SP1-20060918.120000
Q147222
Q828026


Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'Intel(R) PRO/100+ MiniPCI - Odyssey Network
Services
Miniport' may not be working.
GetStats failed for 'WAN-minipoort (PPTP)'. [ERROR_GEN_FAILURE]
[WARNING] The net card 'WAN-minipoort (IP)' may not be working because
it ha
s not received any packets.
GetStats failed for 'WAN-minipoort (L2TP)'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Infrarood modempoort'. [ERROR_NOT_SUPPORTED]
GetStats failed for 'Infraroodpoort'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Intel(R) PRO/100+ MiniPCI - Deterministic
Network En
hancer Miniport' may not be working.
[WARNING] The net card 'WAN-minipoort (IP) - Deterministic Network
Enhancer
Miniport' may not be working because it has not received any packets.
[WARNING] The net card 'Intel(R) PRO/100+ MiniPCI' may not be working.
[WARNING] The net card 'SMC IrCC: snelle infraroodpoort' may not be
working
because it has not received any packets.



Per interface results:

Adapter : LAN-verbinding 5

Netcard queries test . . . : Passed

Adapter : LAN-verbinding

Netcard queries test . . . : Failed
NetCard Status: DISCONNECTED
Some tests will be skipped on this interface.


Global results:


Domain membership test . . . . . . : Passed


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{A7A34A81-FC67-4337-BD58-2A445D6E14AF}
1 NetBt transport currently configured.


DC discovery test. . . . . . . . . : Passed

any sugestions resolving my problems....




"Steven L Umbach" wrote:

> Is this new or ongoing behavior?? The first two things I would check is that
> the properties in the user's account in ADUC does not show that can not
> change password is enabled and that the minimum password age is not set too
> high which generally does not need to be more than two days. You can run the
> command net accounts on a domain controller to quickly see that setting
> which usually is set by Domain Security Policy unless you have configured
> additional GPOs linked to the domain container that are higher in the
> priority list than the default domain GPO that have minimum password age
> configured. Also make sure that the client computers can contact a domain
> controller or the password change will fail. The support tool netdiag will
> show errors/warnings if a domain controller can not be found or contacted
> when run on a domain client computer.
>
> Steve
>
>
> "jimi hendrix" <jimihendrix@discussions.microsoft.com> wrote in message
> news:D2AA3C1D-9010-4AFE-BA37-BA5481EF57E0@microsoft.com...
> > my client are not able to change their domain password.
> > error unable to change password
> > They exist in a windows 2000 ad domain, as far as i can see there is no
> > policy preventing the clients from changing their domain logon password
> > can anyone point me in the right direction, thanks in advance
>
>
>