Hello All,
I am currently seeing an issue that I have not been able to chase down.

If a user tries to log in & their password is due to expire within 14 days
they get a prompt to change their password. if they click yes, they go to a
screen where they have to put in theor existing pword & their new one. if
they do this, they get a message You do not have permission to change your
password. If they simply log onto their pc with their existing pword & then
go to the Windows security screen ( Ctrl/Alt Del) and select Change password
they are able to do so.

Appears that only the non authenticated attempt to change is failing. I have
verified in AD if I check the security for a user the Everyone user is listed
with Change Password rights. Only on the user & computer level, NOT for the
OU for either computers or users.

Running a Win2k domain SP2. Using 5 DCs. Nothing has changed on the Domain
in quite a while.

Any thoughts? I've been out of the Windows side of things for quite a while
( Linux Admin) so forgive me if my explaination is off.

Thanks,
Steve