Password Reset Permissions Issue

[bgfs2]

I have a two part problem. We have recently migrated to a national AD. The domain controllers are located in this AD together with all computer and user accounts, but our Resource servers, Citrix metaframe in particular are in our old AD. We do not have logon permission to the DC's so we can't see the Domain Security policy which we are assured (Hmmm) that is not affecting our systems, but have full access to our OU level of the AD so can view Domain and OU policies.

We encountered a problem with Password Reset permissions in that when a user tries to reset their password they get the message "you do not have permission to change your password". I managed to track down the problem in the national AD to an apparent conflict with one of our local policies in that even you the mimimum password age was set to 0, users were not allowed to change. This was proved by the fact that when I disabled the values in the GPO, users were able to change their passwords.

The second part of the problem and the one that is affecting us is that when a user tries to change their password in a Citrix session the password problem still shows. As the Citrix servers are in the old AD, authentication is passthrough. Any ideas as to what could be causing the issue

 

[19870622]

If it is just user account password,try starting the computer in Safe Mode. Supposedly this will enable the built-in Administrator account for the one session. The default password may be a blank. Get into Safe Mode by repeatedly tapping the F8 key as the computer is starting up. If this works for you, then you can set a new password for your normal account.

But if it is admin password,i think you need to download Windows Password Key to help.

PS:
Windows Password Key 8.0 is considered as the best tool to reset local administrator and user passwords on any Windows system. It creates a password recovery CD/DVD, USB Flash Drive for home, business and enterprise. And most of all, it's the most popular and safe solution for resetting your Windows password until now.