Active Directory Password Change Over VPN

[traid]

When users attempt to change their password they receive a message "You do not have permission to change your password." They are Windows 2000 professional logging in to a cached AD account on the local workstation, then connecting to our 3030s via the Cisco VPN Client. Once connected they hit ctrl-alt-del and go to change password so it changes on both the domain and workstation. We only have this problem on some broadband users. Our workaround has been dialing in to a 3rd party provider, VPN in, and changing it that way. Any ideas?

 

[AlexIT]

Please clarify: it works if they dial-in to an ISP then VPN, but it fails if they are broadband then VPN? That makes no sense...

 

[traid]

You got it right, it does not work over broadband for some users, but it works 100% over dialup. They are using the same VPN tunnel, same software, but cannot change their password.

 

[mcilvane]

Are the dial-up users dialing to something "in house" or just through any ISP, then VPN into your network?

 

[traid]

They are dialing in to a 3rd party ISP (

http://www.ipass.com)

and connecting via the same Cisco VPN software.