Stop users from changing passwords

Discussion in 'Windows Small Business Server' started by James Currie, Feb 28, 2005.

  1. James Currie

    James Currie Guest

    We recently upgraded a client from SBS2000 to SBS2003 and since then we have
    the following problem.

    We set users accounts to Passwords Never Expire and Users Cannot Change
    Password in the user account properties in AD. The thing is that after about
    30 mins, the Users Cannot Change password is unchecked again. Is this a know
    issue? Or could it be triggered somewhere by Group Policy?? I have checked
    all password policies and there doesn't seem to be any that conflict.
    Everything is now set to default within the password policies (ie no policies
    are defined), but still after 30 mins or so. The option becomes unchecked.

    I also checked group membership and none of the users are administrators.

    Any help greatly appreciated
    James Currie, Feb 28, 2005
    1. Advertisements

  2. James Currie

    Jeff Teel Guest

    Hi James
    It does seem strange that it changes back after 30 minuets or so. In the
    Manage Users area of Server management the least it can be set to is one
    day. I am wondering if the change you are making is being saved! One
    suggestion I would try is to run gpupdate /all in Start/Run on the server
    and see if that makes it stay the way you want it.

    Jeff Teel, Mar 1, 2005
    1. Advertisements

  3. James Currie

    James Currie Guest

    Thanks Jeff

    I'll give that a try. It was saving the setting briefly, as i went back in
    to check that the change had been made, then the setting was lost after
    around 30 mins.
    James Currie, Mar 1, 2005
  4. James Currie

    Jeff Teel Guest

    Hi James
    I thought I'd give my system a test to see how it responded when setting the
    password so it could not be changed. Here is where I made that change just
    for clarification. I did this in the Server Management in Manage Users. I
    right-clicked on the user name and then clicked Properties. The window that
    opened had tabs across the top and I chose Account and in Account Options
    area put a check beside "User cannot change password". It is still checked
    after over two hours so it looks like it will stay. Is that the same area
    that you are changing your system?

    Jeff Teel, Mar 1, 2005
  5. James Currie

    James Currie Guest

    Hi Jeff

    That is the same place. I tick that box then between 30 mins and 2 hours
    later the box is unticked again. I tried your earlier suggestion but it
    didn't work. I've currently got a ticket open with Microsoft Support, so I'll
    let you know how that goes

    James Currie, Mar 1, 2005
  6. James Currie

    Jeff Teel Guest

    Hi James,
    I checked my system again to see if the check was still in place and it was.
    So I'm not sure what would be making it revert back to the old setting. I do
    wonder if the users can actually change their password or not after it (the
    server) reverts back to the unchecked state. Just curious!! If they can't it
    is still odd that the check is gone when the user can't change their
    Jeff Teel, Mar 3, 2005
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.