Network Expiring Password Prompt Not Working

[mlc9]

The expiring password prompt that is generated when logging on to our domain is no longer given. I run a Win 2K3 domain controller, and Win XP Pro workstations across the board.

The group policy for Interactive Logon is defined and configured correctly, and this was working up to just a few weeks ago. The only thing that has changed was a piece of software called Password Reminder Pro that was installed on the DC. It polls Active Directory for expiring passwords, and sends an email to the user about such. The software company assures me that this in way would have turned off the Windows reminder prompts. Any suggestions?

 

[Stevehewitt]

How about uninstalling the new software and then see how it goes?

Also, use net user %username% to test that what you think should be happening in AD is actually reflected on the user object. Can the user even logon when the password has expired?



Steve.

"They have the internet on computers now!" - Homer Simpson

 

[mlc9]

Well, the software has a test and a live mode. Putting the software in test mode does not appear to make the password expiring prompt start working again.

I have completely uninstalled the software, but if anybody else has any thoughts, I'd be much appreciative. I just can not be sure if the this began happening when the software went live or not. It is also difficult to test, b/c I have no way of knowing which account passwords are expiring without the software. It gives me a daily report of which network account passwords are about to expire. Otherwise, I know of no way of asking any particular person if they've been getting the Windows prompt.

 

[DTracy]

Did you check the accounts to see if the software altered the setting for password expiration? That may possible be located in the kerberos settings, I don't remember.

 

[mlc9]

If not mistaken, the password expiration should be controlled by group policy, and actually I have just recently changed that myself from 30 days to 60 days. Even if that setting was changed, it still makes no differnce to the fact that I have legitimate passwords that are expiring within a matter of days, and no Windows prompts are being generated. Thanks

 

[DTracy]

Ok, I couldn't remember exactly where it was located. Have you used the command "gpresult" at a workstation to see what is being imposed and by whom?

 

[mlc9]

Well, when doing a "gpresult", I get my Default Domain Policy applied, but Local Group Policy was not applied b/c they were filtered out <empty>.

Thoughts?