Cannot change password if password has expired in active directory

Question

Good morning

Since a couple of days ago we have detected that the domain I manage with DCs in 2019. It does not allow to change the password if it has already expired or I have marked me as administrator change the password at next login.

It affects all users, administrators, normal users, newly created users.

I have seen closed threads talking about this problem but I don't see the solution in my environment.

https://social.technet.microsoft.com/Forums/windowsserver/en-US/e2958828-75b7-43d5-a765-9f4a4fc671ca/user-cannot-change-expired-password?forum=winserverDS

Answer 1

What I need to know is how can I skip a particular update in Windows Server 2019? In previous versions with the old control panel it could be done without problems, where is that functionality in modern control panel?

Answer 2

It happened to me in an AD with DCs in Windows Server 2016 and I managed to solve it using the GPEDIT.MSC, in addition to the POwerShell Get-ADDefaultDomainPasswordPolicy command. I could also have used the Get-ADDefaultDomainPasswordPolicy command to make the changes, but it is more convenient via GPedit.msc and they have the same effect that can be checked with Get-ADDefaultDomainPasswordPolicy.
Note the changes from the GPEDIT.MSC are replicated in some way in all DCs, I have searched for Official information on why this is so and I can't find it, but that's how it worked for me.
Greetings from Medellin. Colombia