You do not have permission to change your password

[jawastro]

I have certain users that get the following error message when trying to change their password: "You do not have permission to change your password".

Domain - AD runing windows 2000 Server with SP4 + latest updates.
Clients running XP Professional with SP1 + latest updates.

Account policies as follows:

Enforce password history: 3
Max password age: 42 days
Min password age: 30 days
Min password length: 6 characters
Password meet complexity requirements: not defined
Store password using reversible encryption: not defined.

 

[Ger2111]

Make sure that the User Cannot Change Password Check box is un checked on the Accounts Tab under user properties.

MCP

 

[jawastro]

"The user cannot change password box" is unchecked for the accounts that are experiencing this problem.

 

[sbnil]

I also have users that are experiencing this problem. Both on Win98 and XP.

 

[vbrocks]

What about the group policy?

 

[ibrahims]

Check if there is any GPO that applied on the Domain level that restrict the users from changing their Passwords

Ibrahims

 

[MSperrin]

On the security tab in the users properties make sure that self has changed password ticked as allow. Make sure that deny isn't ticked as it takes precedence.

Martin

 

[jawastro]

I disabled the Default Domain Group Policy and this problem persists.

 

[jawastro]

I checked the user properties of a particular account that was having this problem and ticked self has changed password to allow and this did not make any difference i'm afraid..

 

[vbrocks]

Change your min password age to 0. In the security settings.