Password change problem

[Evan Molnar]

We recently developed a problem (after Microsoft came in and rebuilt our Cluster Server while I was out sick, or at least half of it) where a user's password will expire and it will prompt them to change it, just like it should. They put in the new password, hit ok, and NT/98 boxes come back saying they can't find the PDC! The helpdesk has to change them for the user until I get this fixed. Anyone have ideas? No events in the logs on the PDC, and the machines can obviously find the PDC because it logs them in after we change the password, and nobody has a problem until their password expires!

Thanks

[Colin]

Hi

More info is required, how is your network setup, how are the clients resolving the PDC name, could it be a WINS problem

Colin
------------
Evan Molnar at 6/22/01 3:05:03 PM

We recently developed a problem (after Microsoft came in and rebuilt our Cluster Server while I was out sick, or at least half of it) where a user's password will expire and it will prompt them to change it, just like it should. They put in the new password, hit ok, and NT/98 boxes come back saying they can't find the PDC! The helpdesk has to change them for the user until I get this fixed. Anyone have ideas? No events in the logs on the PDC, and the machines can obviously find the PDC because it logs them in after we change the password, and nobody has a problem until their password expires!

Thanks

[Garry]

Hi

I am seen something simalir on our systems and it was because on the PDC the following reg key was enabled

Check “RestrictAnonymous" exists under. HKLMSystemCurrentControlSetControlLSA with a HEX value of 1 (one) if it does change it to a value of 0 (Zero) and reboot the machine.



------------
Colin at 6/25/01 9:32:42 AM



Hi

More info is required, how is your network setup, how are the clients resolving the PDC name, could it be a WINS problem

Colin
------------
Evan Molnar at 6/22/01 3:05:03 PM

We recently developed a problem (after Microsoft came in and rebuilt our Cluster Server while I was out sick, or at least half of it) where a user's password will expire and it will prompt them to change it, just like it should. They put in the new password, hit ok, and NT/98 boxes come back saying they can't find the PDC! The helpdesk has to change them for the user until I get this fixed. Anyone have ideas? No events in the logs on the PDC, and the machines can obviously find the PDC because it logs them in after we change the password, and nobody has a problem until their password expires!

Thanks

[Evan Molnar]

We're set up with WINS for name resolution, but I don't believe it to be a problem with wins - the PDC is on both of our HQ's subnets and we have the problem with machines here as well as ones out in the branches.


------------
Garry at 6/27/01 3:42:08 PM

Hi

I am seen something simalir on our systems and it was because on the PDC the following reg key was enabled

Check “RestrictAnonymous" exists under. HKLMSystemCurrentControlSetControlLSA with a HEX value of 1 (one) if it does change it to a value of 0 (Zero) and reboot the machine.



------------
Colin at 6/25/01 9:32:42 AM



Hi

More info is required, how is your network setup, how are the clients resolving the PDC name, could it be a WINS problem

Colin
------------
Evan Molnar at 6/22/01 3:05:03 PM

We recently developed a problem (after Microsoft came in and rebuilt our Cluster Server while I was out sick, or at least half of it) where a user's password will expire and it will prompt them to change it, just like it should. They put in the new password, hit ok, and NT/98 boxes come back saying they can't find the PDC! The helpdesk has to change them for the user until I get this fixed. Anyone have ideas? No events in the logs on the PDC, and the machines can obviously find the PDC because it logs them in after we change the password, and nobody has a problem until their password expires!

Thanks

[Ofir]

1. what is your NT domain version? (NT4 4.0/2000)?
2. Do you have a separated sites?
3. How many BDC's do you have (if any at all)?
4. If you have a BDC's - the client does not obviously find the PDC,
because the BDC can log them in!!!
5. What is your IP resolutuin system? (Wins / Dns / broadcust)?
6. What tool does the help desk use to change passwords?

EMAIL ME THE ANSWERS AND I WILL TRY TO HELP.