Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 359
  • Last Modified:

windows 2008 password new

Hello
I have a windows 2008 server with AD.

My problem is clients when they password change computer must be restarting.
How can i stop ,and clients after password change and login not change and restart
0
orkinos
Asked:
orkinos
  • 11
  • 7
1 Solution
 
itubafCommented:
if i underatnd right, when your clients change system password they have to restart computers?

no need to restart if client is connected with Domain, make sure you put DC ip in client prefered DNS list and no any GPO is set to restart computer after assword change.

for testing purpose you can assign proper IP and DNS setting on test computer, after you type Ctrl+Alt+Del and change password.
 
0
 
orkinosAuthor Commented:
if i underatnd right, when your clients change system password they have to restart computers?  YES RIGHT
0
 
orkinosAuthor Commented:
ok but if you client do not use DC DNS ip addreess then client can not login or?
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
orkinosAuthor Commented:
our clients joined domain.

and system change every 40 days password ,when they login comes out password change screen when they change then restarting but normally this not must be
0
 
itubafCommented:
Dear, now you asked 2 questions

1- computer restart after password change
2- if you dont put your DNS server ip in client DNS tab, will client able to login

Dear,clients should use DC (AD+DNS) IP address in there prefered DNS setting, for example, your AD is installed on a server and server as follows

ip address is 192.168.168.1
Subnet Mask  255.255.255.0
Gateway 192.168.168.254

DNS1          192.168.168.1

your client should be similar to below

ip address 192.168.168.2-----253
subnet 255.255.255.0
Gateway 192.168.168.254

DNS 192.168.168.1

 once you will put your DC (AD+DNS) ip in clinet prefered DNS tab your network performance will increase + you will not have many issue like (accessing resources, printer sharing, browsing.......)

if you will not put DC ip in client DNS tab and you put ISP IP, you may be able to logon on Domain but the logon time will be more + you will have imitant issue.
0
 
orkinosAuthor Commented:
this answers not related with my question
0
 
orkinosAuthor Commented:
there is a joined ad client password issue not a HOW TO JOIN TO AD..
0
 
orkinosAuthor Commented:
and also i do not ask 2 question
0
 
orkinosAuthor Commented:
2.question Do you have a experiance in windows 2008 ad?
0
 
itubafCommented:
this mean you have a policy for clients to change system password every 40 days, system restart is not required, if your clients are experiening problem you have to check network setting in clients.

GO to Run> CMD> ipconfig/all

and check DNS setting?
0
 
itubafCommented:
my dear i have not mention joing client with AD above, i explained only what could be the cause of restarting pcs after changing password. thank you
0
 
itubafCommented:
you inital question was
"when your clients change system password they have to restart computers" and your second question was
"client do not use DC DNS ip addreess then client can not login or? "

0
 
orkinosAuthor Commented:
When you have dns issue then password change screen can not comes out. RIGHT?

May be this explains little bit  
The machine account's password is usually changed every 30 days by the machine.  does not allow the new password to be stored on the computer, computer level GPO will probably fail as the computer cannot log on to AD.
0
 
orkinosAuthor Commented:
THERE IS NO LINK WITH DNS ISSUE OR DHCP
0
 
itubafCommented:
GPO always has priority on local security policy. once you aplu policy through Domain than local policy will not be enforce, fo example. if your domain policy for users stats change password every 40 days and system local policy stat 30 days. you system will accaept only domain policy.

0
 
orkinosAuthor Commented:
but you are write i wrote not very clear
0
 
orkinosAuthor Commented:
anyway thanks
0
 
itubafCommented:
YOU ARE WELCOME.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 11
  • 7
Tackle projects and never again get stuck behind a technical roadblock.
Join Now