cakirfatih
asked on
Password change prompts and Win 2000
I have a group policy enabled as follows:
Under Security Settings - Account Policies - Password Policy:
maximum password age - 90 days
minimum password age - 30 days
Under Local Policies - Security Options:
Domain member: Maximum machine account password age - 90 days
Interactive logon: Prompt user to change password before expiration - 7 days
The problem I am having is that a user was prompted that in 7 days her password would expire. She changed the password. The next day she was prompted AGAIN that in 6 days her password would expire, and it required her to change it AGAIN. It has done this every day for 3 days.
What could be the problem? Why does it keep requiring her to change it every day? I checked her user name under the active directory users and nothing is checked on her account.
I have not seen this happen on any of the other machines under the same group policy.
Thanks.
Under Security Settings - Account Policies - Password Policy:
maximum password age - 90 days
minimum password age - 30 days
Under Local Policies - Security Options:
Domain member: Maximum machine account password age - 90 days
Interactive logon: Prompt user to change password before expiration - 7 days
The problem I am having is that a user was prompted that in 7 days her password would expire. She changed the password. The next day she was prompted AGAIN that in 6 days her password would expire, and it required her to change it AGAIN. It has done this every day for 3 days.
What could be the problem? Why does it keep requiring her to change it every day? I checked her user name under the active directory users and nothing is checked on her account.
I have not seen this happen on any of the other machines under the same group policy.
Thanks.
Ok, that is odd! What type of authentication do you use NTLM or Basic ? Is her 'password does not expire' checked or unchecked?
ASKER
Well the server OS is Windows server 2003, which uses Integrated Windows Authentication (NTLM).
As I stated in my original post, nothing is checked on her Account.
I thought maybe the problem had something to do with the minimum password age setting?
As I stated in my original post, nothing is checked on her Account.
I thought maybe the problem had something to do with the minimum password age setting?
Machine account? Ah, Windows 2003...not qualified to answer there. Sorry about that...
ASKER
I think I figured out the problem myself. I changed the minimum password age to 0 days and did not have the problem again. Very strange.
(Under Security Settings - Account Policies - Password Policy:
minimum password age - 30 days)
Hrm..a bit odd. Well, glad you got it ironed out!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
looks like she's not saving the change, sorry it's all i can come up with
hope that this helps