"User cannot change password" Active Directory
phuschnickens
Beverly Hills, Michigan Member
I'm trying to restrict 4 users from changing their passwords. For each user in active directory, i check the "user cannot change password" option within the account properties. This option is sticking for about one day (24 hrs)... then i go to double-check it and they are all unchecked again.... WHAT AM I DOING WRONG?
Thanks
Thanks
0
Comments
not sure if i know exactly what you mean... but I do have these users set to "password never expires"
Most companies have the GPO set similarly to this...
I believe there is a setting to prohibit "Pass does not expire" and it may tie in the fact that the user MUST be able to reset the password.
not sure what number (off)
not sure what number (off)
3
disabled
disabled
That's how I have it set. How's that for security, ha.
But really, what's this have to do with the "user cannot change password" resetting itself?
And this is a link to an experts-exchange thread... Active Directory - "User Cannot Change Password" keeps unchecking itself..
This is the answer that is listed from that link:
This is the membership of one of the users affected by the problem:
I am going to change this membership to only "domain users" and "users."
Any suggestions as to what I'm doing wrong?
thanks
Norge
See MS Doc.
Unrelated question and probably worthy of a new post:
Any way to view a user's session on a client computer?
p.s. without permission
The bigger issue... Ethics. As a Domain Admin, I stay far away from these types of issues since we have so much power and many people are very leery of what we can do. Many assume we can do more than we can. I strive to let my users know that I would NEVER stoop to the level where I would eavesdrop on their computing without permission from upper management or some court order.
Yeah I've thought of that. And then there's the other end... the "you're getting paid to work here not to come in on sundays just to use our internet access and although you say you're actually working on sundays it's clear that you can't really make sales calls on sundays because most businesses aren't open" side of it. and i also suspect she allows her 13 yo daughter to log on to another client computer to "play." I work in a small company for my father. We monitor emails and have recently implemented software that allows for call logging etc. It might make the company a little big brotherish which i'm not necessarily a fan of, but the paychecks come on time and we let them employees know that it's all just part of the deal.
I'm actually interested in feedback on this..