password expiered! (No ask for changing it)

[Guest girts]

Hello,

 

I have such problem:

I am using Windows 2003 Server Standard with SP2 and Active Directory and

GPO. All workstations are authorized using AD. Password is set valid for 30

days and after 30 days system asks to change it. But there is one big

problem. Password is expired but system allow to login in system with old

password and when person is opening Outlook it asks to change password, but

when person log out and then put old password again system asks to change it.

Why system doesn’t ask at first time when it already was expired???

 

 

Regards,

Girts

[Guest Florian Frommherz [MVP]]

Re: password expiered! (No ask for changing it)

 

Howdie!

 

girts schrieb:

> I am using Windows 2003 Server Standard with SP2 and Active Directory and

> GPO. All workstations are authorized using AD. Password is set valid for 30

> days and after 30 days system asks to change it. But there is one big

> problem. Password is expired but system allow to login in system with old

> password and when person is opening Outlook it asks to change password, but

> when person log out and then put old password again system asks to change it.

> Why system doesn’t ask at first time when it already was expired???

 

I suspect Windows XP lets the user log on locally with the old password

(using cached credentials) as by the time the user presses CNTL+ALT+DEL

and logs in, the networking subsystem isn't ready.

 

There's a Group Policy to make Windows XP wait for the network at startups:

Computer Configuration\Administrative Templates\System\Logon\

"Always wait for the network at computer startup and logon"

 

cheers,

 

Florian

--

Microsoft MVP - Windows Server - Group Policy.

eMail: prename [at] frickelsoft [dot] net.

blog: http://www.frickelsoft.net/blog.

Use a newsreader! http://www.frickelsoft.net/news.html

[Guest girts]

Re: password expiered! (No ask for changing it)

 

Person is login in in network. All computers are in domain!

Is there need to configure in GPO on server and what?

 

Regards,

Girts

 

"Florian Frommherz [MVP]" wrote:

> Howdie!

>

> girts schrieb:

> > I am using Windows 2003 Server Standard with SP2 and Active Directory and

> > GPO. All workstations are authorized using AD. Password is set valid for 30

> > days and after 30 days system asks to change it. But there is one big

> > problem. Password is expired but system allow to login in system with old

> > password and when person is opening Outlook it asks to change password, but

> > when person log out and then put old password again system asks to change it.

> > Why system doesn’t ask at first time when it already was expired???

>

> I suspect Windows XP lets the user log on locally with the old password

> (using cached credentials) as by the time the user presses CNTL+ALT+DEL

> and logs in, the networking subsystem isn't ready.

>

> There's a Group Policy to make Windows XP wait for the network at startups:

> Computer Configuration\Administrative Templates\System\Logon\

> "Always wait for the network at computer startup and logon"

>

> cheers,

>

> Florian

> --

> Microsoft MVP - Windows Server - Group Policy.

> eMail: prename [at] frickelsoft [dot] net.

> blog: http://www.frickelsoft.net/blog.

> Use a newsreader! http://www.frickelsoft.net/news.html

>

[Guest girts]

RE: password expiered! (No ask for changing it)

 

Thanks You. Question is answered.

 

Regards,

Girts

 

"girts" wrote:

> Hello,

>

> I have such problem:

> I am using Windows 2003 Server Standard with SP2 and Active Directory and

> GPO. All workstations are authorized using AD. Password is set valid for 30

> days and after 30 days system asks to change it. But there is one big

> problem. Password is expired but system allow to login in system with old

> password and when person is opening Outlook it asks to change password, but

> when person log out and then put old password again system asks to change it.

> Why system doesn’t ask at first time when it already was expired???

>

>

> Regards,

> Girts