question

SzymonRabiza-7107 avatar image
0 Votes"
SzymonRabiza-7107 asked SzymonRabiza-7107 answered

Problem with changing password

Hello
When someone trying changing password by himself (because it's ending of password 1 days left. Etc.) they cannot (Ctrl + alt + Del → change password), but when they change password while logging they can, how to resolve this problem
We use AD group policy, it's something in there?

windows-group-policy
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @SzymonRabiza-7107,

Hope you are doing well.

May I know how things are going on your end? For any question, please feel free to post here.

Best regards,
Hannah Xiong

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·
HannahXiong-MSFT avatar image
1 Vote"
HannahXiong-MSFT answered HannahXiong-MSFT commented

Hello @SzymonRabiza-7107,

Thank you so much for your kindly reply.

To better understand our issue and provide any suggestions, we would like to confirm more details with you.

  1. As stated, they could not change their password via Ctrl + alt + Del → change a password. Did we mean that the password could not be changed before the users log in via Ctrl + alt + Del → change a password?

If so, if the users do not log in as shown below, when we press Ctrl + alt + Del, there will be no prompt for the options such as Lock, Change a password.

117265-image.png

117266-image.png

  1. When they log in, could they change their password via Ctrl + alt + Del → change a password? If not, is there any error message? Or could you please provide more details about how they could not change their password?

117267-image.png

  1. Please run the following command on the client to which the user log in.

Net accounts

117274-image.png

Best regards,
Hannah Xiong




image.png (37.3 KiB)
image.png (17.6 KiB)
image.png (475.1 KiB)
image.png (19.4 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @HannahXiong-MSFT,

  1. They cannot change password via Ctrl + Alt + Del → Change password.

  2. When they try to change password via Ctrl + Alt + Del → Change password, they receive a message that "The password is insufficiently complex" or something like that, even though the password is sufficiently complex, but when they log out, and I set a one-time password with password change when logging in, they write the same password as they try before and everything works fine. I guess if they hadn't reset their password before it expires, it would work the same as with a one-time password. Is there any kind of policy in group policy that block changing password during being logged in?

CMD
117275-screenshot-1.png



Best regards,
Szymon Rabiza

0 Votes 0 ·
screenshot-1.png (13.6 KiB)

Hello @SzymonRabiza-7107,

Thank you so much for your prompt reply.

  1. As for the first point, if the user does not log in, he will not be able to change the password via Ctrl + Alt + Del → Change password since there is no such interface.

  2. As for the second point, we have checked the result of the command. The Maximum password age is 30 days while the minimum password age is 29 days. The Minimum password age policy setting determines the period of time (in days) that a password must be used before the user can change it.

So in our scenario, the password must be used for 29 days before it could be changed. That is the possible cause of our issue. To test it, we could change the minimum password age to other days, such as 1 day. And then try to change the password and see whether it could work.

For any question, please feel free to let me know. Thanks a lot.

Best regards,
Hannah Xiong

1 Vote 1 ·
HannahXiong-MSFT avatar image
1 Vote"
HannahXiong-MSFT answered SzymonRabiza-7107 commented

Hello @SzymonRabiza-7107,

Thank you so much for posting here.

According to my understanding, if we use Ctrl+Alt+Del to open the Windows Security dialog box, we will find that the "Chang a password" item is removed from the options. If there is any misunderstanding, please feel free to let me know.

Besides, we mentioned that we use AD group policy. May I know whether we configured the group policy to disable password change from Ctrl+Alt+Del option? To check about this, we could see whether we configure the below policy:

116999-image.png


Best regards,
Hannah Xiong





image.png (69.4 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hallo @HannahXiong-MSFT

We do not disable this options, users see this, I don't know why, but they cannot change their password by themselves, only when the 30 days pass when logging in or when I manually restart password (not exactly manually, I just give them one-time password)

Best regards,
Szymon Rabiza

0 Votes 0 ·
SzymonRabiza-7107 avatar image
0 Votes"
SzymonRabiza-7107 answered

Hello @HannahXiong-MSFT
As for now I change 29 days to 25 days, and now I'm waiting for someone to change password, I'm really hope this going to work

Best regards,
Szymon Rabiza

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.