We had a discussion involving this very issue on this list last week - MS has a KB
article that describes this:
http://support.microsoft.com/?scid=812499
There is a hotfix (referenced in this article), and the fix is included in Win2K SP4.
Hope this helps...we're updating all our DCs to SP4 now, s
P - Active Directory
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Joe
Sent: Thursday, August 07, 2003 10:24 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Password change issue
Get Q812
, August 07, 2003 10:24 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Password change issue
Get Q812499 or SP4.
joe
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Carr, Jonathan
(OFT)
Sent: Thursday, August 07, 2003 7:06 AM
To: [EMAIL PROTECTED]
Get Q812499 or SP4.
joe
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Carr, Jonathan
(OFT)
Sent: Thursday, August 07, 2003 7:06 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Password change issue
OK here it is...
PDC emulator at a central site.
D
IIRC, password changes are part of the normal AD replication. That replication can
take a few minutes unless forced. During the logon process, the logically closest DC
will attempt to validate the logon. If the client is a down-level client (i.e.,
Win9X, NT 4.0), the logon process goes to the
Here's a link to a thread from last week, talking about the pros and
cons of one particular solution to this problem (write the password and
intruder attributes to multiple DCs at a time):
http://www.mail-archive.com/[EMAIL PROTECTED]/msg08132.html
Cheers,
-- Idan
On Thu, 7 Aug 2003, Carr, Jo
Title: Message
Are the
clients Win 9x or NT4 machines? If
so did you install the DSClient on them. The Dsclient allows those computers to
change their passwords.
-Original
Message-
From: cflesher
[mailto:[EMAIL PROTECTED]]
Sent: Friday, November 08, 2002
1:25 PM
To: [EMAIL PRO
Title: Message
Also if they are legacy (9x) clients make
sure they have the DSClient setup. This will allow them to change PW at any DC.
Without it they need to be talking to the PDC emulator.
Kevin
-Original Message-
From: cflesher
[mailto:[EMAIL PROTECTED]]
Sent: Friday,
Title: Message
Have
you set a policy that requires them to have a password for so many days before
they can change it?
Joshua MorganPH: (864)
250-1350 Ext 133[EMAIL PROTECTED]http://www.profit-lab.comhttp://ncontrol.info
-Original Message-From: cflesher
[mailto:[EMAIL PR
