This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 48%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERP%3C/text%3E%3C/svg%3E)
Hello, I have this issue when users passwords expire or I manual reset them with "User must change password" box checked. Every time they enter a new password it tells them to do it again in an endless loop. Any ideas?
We have two DC's with Server 2019 and one DC with 2012.
We do do AD SYNC to Azure
PCS are mostly Windows 10 with a couple Windows 11
Thanks
are the users trying to reset the password from Azure AD, MS365 or from the PC?
Because, if it is from Domain Join PC, your Azure AD connect should not be the issue.
----------
NOTE: To answer you as quickly as possible, please mention me in your reply.
They are resetting from their local PC.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(220.8, 49%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAC%3C/text%3E%3C/svg%3E)
I had the same issue on 3 AD Windows 2019 1809 Datacenter, WinVer 17763.2746.
Solved after removing KB KB5011551
all users stucked in an endless loop to change password after reset
The loop occurs If you set "user must change password at next logon " Not check is a workarround or unclock accout (to use older password) whitout to change it
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
My colleague has confirmed the same issue. We didn't uninstall yet, but we've confirmed the behavior with the expired accounts or must change password on next logon accounts. @JamesTran-MSFT Has this been escalated as a bug or issue to be resolved in a future release? I'd prefer not to uninstall if we can get by a short-while until a patch/fix is available.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 31%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EED%3C/text%3E%3C/svg%3E)
I had the same issue on 2 AD Windows 2019. My problem is that I had to do a recent "Windows Updates" old files clean up from the system and now cannot remove the update in question. Is there a workaround to remove this update?
Thank you!!!
Edwin
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 57.00000000000001%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
One of my clients ran into the loop. Troubleshooting variables: All account options were unchecked, user successfully changed pw, reboot pc 10xs.
The temp fix: Enabled user cannot change pw & pw never expires. Hope this helps.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 35%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
We have the same issue. But we are not connected to Azure and only use DC's with Server 2019.
Uninstalling KB5011551 worked for me too.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 1%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJN%3C/text%3E%3C/svg%3E)
We have also experience the same thing with our Server 2019 Active Directory Domain Controllers after the KB5011551.
We are currently getting by by changing our users passwords, then instructing them to use ctrl-alt-delete once they are logged in to change their password.
Not an ideal solution, and I may wind up removing KB5011551, like everyone else. It's a pain because we have 6 domain controllers, and it seems like a lot of unnecessary work when windows should come up with a patch for this.
I agree, this should be fixed and we are just getting by until a new update is out instead of messing with uninstalling and those troubles.
Has anyone word on whether this will be resolved with the 2022-04 Cumulative "Actual" non-preview update?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 98%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBG%3C/text%3E%3C/svg%3E)
@Alex Cella Sir, I have a fresh Windows Server 2025 DC with no update. I am also facing the same password change issue in my VM Lab. Please help Sir.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 56.00000000000001%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
I am also seeing this issue on 2019 server running virtually. Oddly, my #s 2 and 3 DCs lets expired users change passwords just fine. Just checked and they do not have the update 5011551, so I'm wondering if MS didn't pull that update at some point. The affected server is my GC and it took the update on April 5.
