Exchange 2019 CU11: Unable to reset password that require change on next login

Mohd Azrul Kusrin 1

Hi all,
My Exchange 2019 site running on CU11 SU3 (2 units server).
User start complaining that they wont be able to reset password through OWA if admin select the option User must change password on next login during the password reset. No issue for user to login if admin did not select the option. Normal password change from OWA options do not have any problem, running well. Same issue whether admin reset the password using ECP or ADUC.
Testing direct access to both servers also result the same error as per attached.

User said previously no issue for reset password through OWA with the option selected.

Just upgrade the server to CU11 SU4. Issue still remains.

Need help. Thanks in advanced.
Azrul

Kael Yao-MSFT 37,641 Reputation points Microsoft Vendor

2022-03-28T07:44:41.903+00:00

Hi Azrul,

Have you restarted IIS on Exchange server after you reset the password?
Would it help with this issue?
Mohd Azrul Kusrin 1 Reputation point

2022-03-28T08:56:05.873+00:00

Hi KaelYao,
Nope, iisreset or server restart did not fixed the issue. We reset the password and select require change password, wait for 2-3 days also result remain the same.

Thanks,
Azrul
Kael Yao-MSFT 37,641 Reputation points Microsoft Vendor

2022-03-29T05:29:07.137+00:00

Thanks for the information.

Have you done some changes on Exchange servers or on Domain Controllers before this issue occurs?

Besides OWA, can users change password successfully when they login domain computers?
Mohd Azrul Kusrin 1 Reputation point

2022-03-29T21:04:54.3+00:00

Hi KaelYao,
Just perform monthly Windows patch update on both AD and Exchange Server. After that, user start complaining the issue.
No issue if user change password manually through domain computers or through OWA change password option.

Thanks.
Kael Yao-MSFT 37,641 Reputation points Microsoft Vendor

2022-03-31T02:32:54.31+00:00

Hi,

I tested in my lab but was not able to reproduce this issue.

If you uninstall the update, would it get rid of this issue?
Mohd Azrul Kusrin 1 Reputation point

2022-04-04T07:29:53.173+00:00

Hi KaelYao,
I join discussion with other tech member, and uninstall patch update for KB5011551 on AD servers only.
Reboot the server.
After that, password reset that require change at next login successful.
Is there any issue with the patch update?

Thanks.
Kael Yao-MSFT 37,641 Reputation points Microsoft Vendor

2022-04-05T01:50:52.937+00:00

Hi,

Thanks for the update!

While to my knowledge, currently there haven't been any known issues on Exchange side about this.

But I noticed that there may be some changes related to password in this KB.
Here is also a thread for your reference: Password Change Logon Loop Windows serwer 2019 KB5011551

Share via

Exchange 2019 CU11: Unable to reset password that require change on next login

Your answer