Client has 3 X XenApp 6.5 servers running behind a physical Citrix Access Gateway. All server are running Server 2008 R2.
Authentication is done via the CAG.
All published apps and desktops work fine.
User tried to change their Windows password by, once logged onto the End User Desktop, pressing CTRL +F1 to bring up the Windows Security options, clicking 'Change Password'. Filed out the boxes, click the arrow and they get an 'Access is denied' message.
If i log onto the same End User Desktop wwith my Domain Admin account and follow the same process Im able to change my password fine. So everything seems to be in place for the password change to work but only for Domain Admins.