Suspected Group Policy blocking password change after expiry

Question

Hi There,

I am stuck in a situation whereby one of the user is unable to change her password on her domain joined machine which is connected to the LAN after her password expiry. Its giving out an error saying Access Denied". Tested to change the password via server and user is able to change it but only from her machine its not allowing which indicates that some policy is blocking them to do so. But there were no policy update was done on our environment apart from password complexity change which was done like a month ago. I have checked the default domain password policy and found no changes done. Could you please advise on how this can be identified and solved?

Regards,

PA

Answer 1

Hello PA,

In order to change the password as per expiration policy, a domain joined machine needs to be in contact with the Domain Controller of the domain to which the computer belongs.

The error means that this machine is either not connected to the network of its original domain or for some reason the domain controller is rejecting the connection of this machine. Bear in mind that, by default, the machine will be rejected from the Domain if more than 180 days have passed since the last time that connected to Domain.

Unfortunately, there is no other solution rather than to get in touch with the Domain administrators where this machine was joined in first place in order to "re-join" the domain, and thus gaining again the ability to renew the password.

Best Regards,

Yanhong Liu

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.