• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2823
  • Last Modified:

Windows 7 on domain cannot change user password

I have a situation that is very strange, a user whom uses a windows 7 pro computer on the domain cannot change his/her password by ctrl+alt+del.

The error given is that it doesnt match the appropriate domain complexity rules however I have double checked the domain security polocy to verify and the passwords that we are trying to change to certainly are adequate.  Even so that when I go into the domain controller, i can change them there with the same passwords that we try at the desktop without any problem.

I have tried this on another windows 7 machine with another user, and the first time, it worked just fine. After that, it did not allow the user to make another change.

I have checked the following:
- make sure the user is not a part of the admin group
- made sure they are able to change their password in the active directory
- made sure the password has not been used before
- made sure the password meets the complexity
- password can be changed on a windows xp computer or vista computer without a problem.

Any ideas?
1 Solution
Brian GeeCommented:
I've typically found that when such happens, (non-admin) users are only able to change their own password once every 24 hours and it's typically a policy setting.
Have you tried disabling the complexity just to see if you can change it then?
Brian GeeCommented:
Users receive error "Password must meet minimum complexity requirements"

Issue: The default domain policy has a value or 1 or greater set for the minimum password age. For example if the minimum value is set to 1, then users cannot change the password more than once in 24 hours.

Solution: Set the minimum password age to 0.
 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

I'd check windows 7 local policy ... might have some conflicts with domain policy that is causing this.
Any log entries in your event viewer?
Most probably its what described above by yobri but a look in your event viewer will also give us some clues on what is happening

jhuntinAuthor Commented:
You are the man, that was it.  I totally misread that part and by setting it to 0 we can change at will anywhere. Thanks so much!

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now