Users unable to change passwords after joining a domain
After installing Windows 2003 Server (Standard Edition) and promoting the Server as a Domain Controller, I joined Windows 2000 Professional Clients to that domain. After that I realized that a user was not able to change his/her password. Yes, I know the Standard Password Rules and kept that in mind, but no matter what I tried the users cannot change their password. Do you have any idea?
This can happen if the "Everyone" or "Authenticated Users" Group does not have the "Access this computer from the network" rights on an authenticating domain controller. In addition, this issue can also come up if the "Everyone" Group is has not been granted the "change password" right in the user's OU.
This was first published in March 2004