Password Permissions

[Vikas]

We are running in mixed mode where our PDC is a WIN2K Server. Our password policy is to change password every 60 days. We have clients that are running Winnt4.0 and Win2k Prof. The users who are running Win2k Prof, when there password expires and they try to change it, it says "You do not have permissions to change passwords". We do not have Active Directory activated on our Domain yet and basically all our Domain Policy has been taken over from Winnt4.0 when we upgraded our Current PDC to Win2k from Winnt4.0. Any siggestions?????

[shovel204]

I dont know if this will help, but here is the article that might point to the resolution.
http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q258788

------------
Vikas at 6/11/2002 4:16:14 PM

We are running in mixed mode where our PDC is a WIN2K Server. Our password policy is to change password every 60 days. We have clients that are running Winnt4.0 and Win2k Prof. The users who are running Win2k Prof, when there password expires and they try to change it, it says "You do not have permissions to change passwords". We do not have Active Directory activated on our Domain yet and basically all our Domain Policy has been taken over from Winnt4.0 when we upgraded our Current PDC to Win2k from Winnt4.0. Any siggestions?????

[Vikas]

Thanx Shovel204 but it didn't work since we haven't migrated users to Active Directory and the Article is regarding migrated Users. I think the reason it is happening is because I was still using User Manager for Domain to create users even after I upgraded my PDC to WIN2K but I stll have WINNT4.0 BDC and I noticed that it's only happening with the users who I created after the Upgrade and are running WIN2K Prof. Is there anyway i can resolve it without deleting and recreating these users using Active Directory Users...?

------------
shovel204 at 6/12/2002 2:16:52 AM


I dont know if this will help, but here is the article that might point to the resolution.
http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q258788

------------
Vikas at 6/11/2002 4:16:14 PM

We are running in mixed mode where our PDC is a WIN2K Server. Our password policy is to change password every 60 days. We have clients that are running Winnt4.0 and Win2k Prof. The users who are running Win2k Prof, when there password expires and they try to change it, it says "You do not have permissions to change passwords". We do not have Active Directory activated on our Domain yet and basically all our Domain Policy has been taken over from Winnt4.0 when we upgraded our Current PDC to Win2k from Winnt4.0. Any siggestions?????

[shovel204]

The only other thing I have seen that comes close is quoted below.The rest of the solutions all point to the everyone group.
[Start of quote]
This problem occurs when the network administrator enables the Windows NT option "User must change password at next logon" for the user account and sets the global account policy "User must log on in order to change password."




------------
Vikas at 6/12/2002 11:56:21 AM

Thanx Shovel204 but it didn't work since we haven't migrated users to Active Directory and the Article is regarding migrated Users. I think the reason it is happening is because I was still using User Manager for Domain to create users even after I upgraded my PDC to WIN2K but I stll have WINNT4.0 BDC and I noticed that it's only happening with the users who I created after the Upgrade and are running WIN2K Prof. Is there anyway i can resolve it without deleting and recreating these users using Active Directory Users...?

------------
shovel204 at 6/12/2002 2:16:52 AM


I dont know if this will help, but here is the article that might point to the resolution.
http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q258788

------------
Vikas at 6/11/2002 4:16:14 PM

We are running in mixed mode where our PDC is a WIN2K Server. Our password policy is to change password every 60 days. We have clients that are running Winnt4.0 and Win2k Prof. The users who are running Win2k Prof, when there password expires and they try to change it, it says "You do not have permissions to change passwords". We do not have Active Directory activated on our Domain yet and basically all our Domain Policy has been taken over from Winnt4.0 when we upgraded our Current PDC to Win2k from Winnt4.0. Any siggestions?????

[Jack]

Vikas I think you carried that option up when you upgraded from NT for those users. Those that you have assigned to Win2000 since your upgrade you'll have to redo after installing active directory....Hope this helps you.


------------
shovel204 at 6/13/2002 3:16:09 AM


The only other thing I have seen that comes close is quoted below.The rest of the solutions all point to the everyone group.
[Start of quote]
This problem occurs when the network administrator enables the Windows NT option "User must change password at next logon" for the user account and sets the global account policy "User must log on in order to change password."




------------
Vikas at 6/12/2002 11:56:21 AM

Thanx Shovel204 but it didn't work since we haven't migrated users to Active Directory and the Article is regarding migrated Users. I think the reason it is happening is because I was still using User Manager for Domain to create users even after I upgraded my PDC to WIN2K but I stll have WINNT4.0 BDC and I noticed that it's only happening with the users who I created after the Upgrade and are running WIN2K Prof. Is there anyway i can resolve it without deleting and recreating these users using Active Directory Users...?

------------
shovel204 at 6/12/2002 2:16:52 AM


I dont know if this will help, but here is the article that might point to the resolution.
http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q258788

------------
Vikas at 6/11/2002 4:16:14 PM

We are running in mixed mode where our PDC is a WIN2K Server. Our password policy is to change password every 60 days. We have clients that are running Winnt4.0 and Win2k Prof. The users who are running Win2k Prof, when there password expires and they try to change it, it says "You do not have permissions to change passwords". We do not have Active Directory activated on our Domain yet and basically all our Domain Policy has been taken over from Winnt4.0 when we upgraded our Current PDC to Win2k from Winnt4.0. Any siggestions?????

[Vikas]

Well How would I have carried that option, I made sure that in Account policy "User must logon to change password" was unchecked before I did my upgrade. I even tried solution from Shovel(Below) but no help. Remember I have about 10 WIN2K Prof users who are having this issue, my NT Workstation 4.0 users are all good, so it has to do with WIN2K Prof users communicating with PDC...so Help....


------------
Jack at 7/3/2002 1:45:33 PM

Vikas I think you carried that option up when you upgraded from NT for those users. Those that you have assigned to Win2000 since your upgrade you'll have to redo after installing active directory....Hope this helps you.


------------
shovel204 at 6/13/2002 3:16:09 AM


The only other thing I have seen that comes close is quoted below.The rest of the solutions all point to the everyone group.
[Start of quote]
This problem occurs when the network administrator enables the Windows NT option "User must change password at next logon" for the user account and sets the global account policy "User must log on in order to change password."




------------
Vikas at 6/12/2002 11:56:21 AM

Thanx Shovel204 but it didn't work since we haven't migrated users to Active Directory and the Article is regarding migrated Users. I think the reason it is happening is because I was still using User Manager for Domain to create users even after I upgraded my PDC to WIN2K but I stll have WINNT4.0 BDC and I noticed that it's only happening with the users who I created after the Upgrade and are running WIN2K Prof. Is there anyway i can resolve it without deleting and recreating these users using Active Directory Users...?

------------
shovel204 at 6/12/2002 2:16:52 AM


I dont know if this will help, but here is the article that might point to the resolution.
http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q258788

------------
Vikas at 6/11/2002 4:16:14 PM

We are running in mixed mode where our PDC is a WIN2K Server. Our password policy is to change password every 60 days. We have clients that are running Winnt4.0 and Win2k Prof. The users who are running Win2k Prof, when there password expires and they try to change it, it says "You do not have permissions to change passwords". We do not have Active Directory activated on our Domain yet and basically all our Domain Policy has been taken over from Winnt4.0 when we upgraded our Current PDC to Win2k from Winnt4.0. Any siggestions?????