Problem with changing password

Szymon Rabiza 101

Hello
When someone trying changing password by himself (because it's ending of password 1 days left. Etc.) they cannot (Ctrl + alt + Del → change password), but when they change password while logging they can, how to resolve this problem
We use AD group policy, it's something in there?

Hannah Xiong 6,276 Reputation points

2021-07-26T06:39:18.793+00:00

Hello @Szymon Rabiza ,

Hope you are doing well.

May I know how things are going on your end? For any question, please feel free to post here.

Best regards,
Hannah Xiong

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Accepted answer

Hannah Xiong 6,276 Reputation points

2021-07-23T04:50:04.307+00:00
Hello @Szymon Rabiza ,

Thank you so much for your kindly reply.

To better understand our issue and provide any suggestions, we would like to confirm more details with you.

As stated, they could not change their password via Ctrl + alt + Del → change a password. Did we mean that the password could not be changed before the users log in via Ctrl + alt + Del → change a password?

If so, if the users do not log in as shown below, when we press Ctrl + alt + Del, there will be no prompt for the options such as Lock, Change a password.

When they log in, could they change their password via Ctrl + alt + Del → change a password? If not, is there any error message? Or could you please provide more details about how they could not change their password?

Please run the following command on the client to which the user log in.

Net accounts

Best regards,
Hannah Xiong
Please sign in to rate this answer.

1 person found this answer helpful.
Szymon Rabiza 101 Reputation points

2021-07-23T05:06:14.563+00:00

Hello @Hannah Xiong ,

They cannot change password via Ctrl + Alt + Del → Change password.

When they try to change password via Ctrl + Alt + Del → Change password, they receive a message that "The password is insufficiently complex" or something like that, even though the password is sufficiently complex, but when they log out, and I set a one-time password with password change when logging in, they write the same password as they try before and everything works fine. I guess if they hadn't reset their password before it expires, it would work the same as with a one-time password. Is there any kind of policy in group policy that block changing password during being logged in?

CMD

Best regards,
Szymon Rabiza

Hannah Xiong 6,276 Reputation points

2021-07-23T05:32:32.117+00:00

Hello @Szymon Rabiza ,

Thank you so much for your prompt reply.

As for the first point, if the user does not log in, he will not be able to change the password via Ctrl + Alt + Del → Change password since there is no such interface.

As for the second point, we have checked the result of the command. The Maximum password age is 30 days while the minimum password age is 29 days. The Minimum password age policy setting determines the period of time (in days) that a password must be used before the user can change it.

So in our scenario, the password must be used for 29 days before it could be changed. That is the possible cause of our issue. To test it, we could change the minimum password age to other days, such as 1 day. And then try to change the password and see whether it could work.

For any question, please feel free to let me know. Thanks a lot.

Best regards,
Hannah Xiong
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

2 additional answers

Hannah Xiong 6,276 Reputation points

2021-07-22T10:15:18.003+00:00

Hello @Szymon Rabiza ,

Thank you so much for posting here.

According to my understanding, if we use Ctrl+Alt+Del to open the Windows Security dialog box, we will find that the "Chang a password" item is removed from the options. If there is any misunderstanding, please feel free to let me know.

Besides, we mentioned that we use AD group policy. May I know whether we configured the group policy to disable password change from Ctrl+Alt+Del option? To check about this, we could see whether we configure the below policy:

Best regards,
Hannah Xiong
Please sign in to rate this answer.

1 person found this answer helpful.
Szymon Rabiza 101 Reputation points

2021-07-22T11:09:14.677+00:00

Hallo @Hannah Xiong

We do not disable this options, users see this, I don't know why, but they cannot change their password by themselves, only when the 30 days pass when logging in or when I manually restart password (not exactly manually, I just give them one-time password)

Best regards,
Szymon Rabiza
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Szymon Rabiza 101 Reputation points

2021-07-26T09:35:11.127+00:00

Hello @Hannah Xiong
As for now I change 29 days to 25 days, and now I'm waiting for someone to change password, I'm really hope this going to work

Best regards,
Szymon Rabiza
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Problem with changing password

2 additional answers

Your answer