Windows 7 password expired on a domain

[Rosspb]

HI, I have a windows 7 client on a win 2003 domain server, the user acc password has expired but it wont allow it to be changed, says is invalid, unless I change it direct from the server, is there a way to resolve this?

 

[USAFRet]

HI, I have a windows 7 client on a win 2003 domain server, the user acc password has expired but it wont allow it to be changed, says is invalid, unless I change it direct from the server, is there a way to resolve this?

This is when you talk to whomever adminsters the server.
If it says it must be done from the server, well...that's it. If passwords were that easy to circumvent, they wouldn't be much good, would they?

 

[Rosspb]

Hi, I am the administrator. The issue is the user cant change their password on the client machine when it expires, it just tells them when the attempt to change it that it is declined and cant be updated for some reason.

The only way to change it is via the server, which I have done, but I dont want to have to do this every time, so there must be an issue with win 7 that can be resolved?

 

[USAFRet]

Hi, I am the administrator. The issue is the user cant change their password on the client machine when it expires, it just tells them when the attempt to change it that it is declined and cant be updated for some reason.

The only way to change it is via the server, which I have done, but I dont want to have to do this every time, so there must be an issue with win 7 that can be resolved?

Password policies on the server.
If it is set to expire, then it will expire.
If it is set to "User cannot change password", then that is exactly what will happen.

How do you have it set up?
This is not a Win 7 thing, this is an admin issue, for the person in control of the server.

 

[Rosspb]

The password is set to expire after xx days, when the user goes to update to a new password its says it cant & declines the updated password etc

 

[USAFRet]

The password is set to expire after xx days, when the user goes to update to a new password its says it cant & declines the updated password etc

OK, so what other policies do you have set for this password?
Minimum complexity?
Can't use the same one again?
Enforce password history?

It's your server, you're in control of it.

 

[bicycle_repair_man]

Not to be rude, but are you really the administrator of this server, because it doesn't sound like it? No disrespect to Tom's, but an online forum isn't really the place to come with domain-related questions.

The new password is most likely not complex enough, as USAFRet said, but again, it's your server so you should know what the password requirements are.

 

[Rosspb]

I am the admin, the issue isnt with the server its the win7 client. I cant find a reason for why I can update it directly on the server, then works fine on client, but when they have to change it themselves, as you normally would after set period, it refuses. I even set a new temp password & requested user via server to update immediately on login, still wont allow it.

I came here as cant seem to find an answer or an alternative solution.

Never has this problem when running Win 2k clients, only since updated to Win 7 on one machine. Complexity is fine, even used ientical password with additional number, still same problem.

Message reads 'Unable to reset password - access is denied'

 

[Rosspb]

The password is set to expire after xx days, when the user goes to update to a new password its says it cant & declines the updated password etc

OK, so what other policies do you have set for this password?
Minimum complexity?
Can't use the same one again?
Enforce password history?

It's your server, you're in control of it.

Yes all of those...new password meets the policies set, I even tried to do it on the client myself as the user, same issue. Just says unabel to reset, access declined?

Same policies work fine on a win2k machine, just this one win7 that wont play ball