Users can't change Active directory password on MACs

When they change the account password thought system perferences, the changes are not being passed to the DC and federated services server.
I have logged off and logged back in, And rebooted. If they open the login keychain it will update but is there any way a end user can change there password with out involving IT?
Mac are runing 10.6.8 and 6.5.1 AD .

Hi,
One of our users has iMac, 10.6.8.
She has not got any local account.
She logs on to AD domain, with domain ID
When after 40 days or so she is asked the change the password; it does not work.
If we change it for here through AD or through another Windows PC, it works.
Could you please let me know the best course of action for this type of users who are not administrators of iMac?
I tested by changing my account's PAssword and it worked( I have administrative role).
Kind regards

Similar Messages

  • Can't change Active Directory password

    I have a PowerBook that has successfully bound to an Active Domain (the server is running Serve 2003). When I try to change my password from the Accounts preference pane it rejects my password as not following the rules for a valid password. The problem is that I am following the rules and the password should be valid. Is there something I'm missing, or is there a binding option I should or shouldn't be using?
    Thanks

    Chances are that you're actually not following the password complexity rules. Your IT folks may not have told you every little exception. I'll give you what I consider to be the common rules:
    1. Must be at least eight (8) characters long.
    2. Must contain at least one UPPER case letter.
    3. Must contain at least one lower case letter.
    4. Must contain at least one number (0-9) or a symbol created by SHIFTing a number ( Shift 0-9 = !@#$%^&*() )
    5. Must not contain any form of your user name
    6. Must be a password you've never used before.
    7. Must not contain any words in the dictionary.
    8. Must begin with a letter, not a number.
    See if you can use this password: P@55w0rd
    If you're absolutely postive that your password meets the complexity rules then try changing it on a Windows machine. A failure may display a message with the complexity requirements.
    Hope this helps!
    bill

  • Unable to change Active Directory password on OSX

    I'm working IT in a Windows environment with Active Directory services. We have some Macs in the environment, mostly running 10.8, but all definitely running 10.6.8 or later.
    The issue lies with changing passwords. When a user attempts to change his password in the Users & Groups pane of System Prefs, it will throw an error about either complexity, systems admin permission, or some other issue. THESE PASSWORDS DO MEET ALL COMPLEXITY REQUIREMENTS AND THEY ARE ALLOWED TO CHANGE THEIR OWN PASSWORDS.
    I obviously need to look further into the user accounts but for the most part they are mobile accounts and the machine is on the domain before the specific user account is ever created. Also Keychain access is set to sync with account.
    The only solution I've been able to come up with is to reset the users password back to their old password through AD.
    I don't even know where to begin to resolve this issue, the ideal solution is that a user can change their password in OSX and have it populate across the domain just like it does on Windows.
    Help!!! 
    Thanks for your time.

    you may want to try the forums at http://www.macwindows.com

  • Unable to change Active Directory passwords

    I am trying to configure the Macs here in the building to authenticate to our 2003 domain. I am able to bind them to the domain and I can login. The problem is that on just one of the Macs the user cannot change her password. After she types in her old password and new one the computer presents an error message stating that she doesn't have permission to change her password. I went over there and logged on with my account and tried to change my password as well and encountered the same problem. If someone knows how to fix this please let me know, I've been fighting with it for a week now and am at the end of my rope.

    Never mind I just figured it out. The problem was that her clock differed from the server's clock by about 6 minutes. After setting the machine to sync its clock with our in house network time server the problem went away.

  • Active Directory password change error

    I have about 10 Macs running 10.4.11 that are bound to Active Directory (Windows 2000 Server).
    Users see the warning that their password is about to expire. However, for users who have a local account on the machine, when they attempt to change their password via System Prefs, only the local password is changed - the Active Directory password remains unchanged.
    For users who do not have a local account on the machine, this error occurs:
    "You cannot change your password to the password you entered. Your system administrator may not allow you to change your password or there was some other problem with your password."
    We have the following password requirements in place via Group Policy: complexity, length, min age (2 days), max age (90 days), history (last 4 remembered).
    Oddly, I myself am able to change my Active Directory password just fine via System Prefs. Thinking it was a permissions issue, I created an account with the same AD permissions as mine, but no dice. Oddly, I logged into a different Mac and attempted to change my password there, but received the above error. So not only am I the only one able to change their password, but I can only do this on one of the computers.
    Can anyone explain what exactly happens after you click the "change password" button, in terms of what kind of request is sent to our domain controller, and how the domain controller handles that? I'm hoping maybe that will help me to understand what is going wrong.
    Thanks.

    count me in on the issue as well. this has not always been the case for us. the console shows the directory services crashing and making a crash report. i'd really appreciate a fix for this.
    Below is the activity from the console log upon attempting to change the pass.
    12/8/08 12:19:17 PM ReportCrash[1045] Formulating crash report for process DirectoryService[857]
    12/8/08 12:19:17 PM com.apple.launchd[1] (com.apple.DirectoryServices[857]) Exited abnormally: Segmentation fault
    12/8/08 12:19:17 PM DirectoryService[1046] Launched version 5.5 (v514.23)
    12/8/08 12:19:17 PM DirectoryService[1046] Improper shutdown detected
    12/8/08 12:19:17 PM ReportCrash[1045] Saved crashreport to /Library/Logs/CrashReporter/DirectoryService2008-12-08-121916localhost.crash using uid: 0 gid: 0, euid: 0 egid: 0
    12/8/08 12:19:21 PM com.apple.DirectoryServices[1046] Enter machine password:
    12/8/08 12:19:22 PM com.apple.DirectoryServices[1046] Enter machine password:
    12/8/08 12:19:24 PM com.apple.DirectoryServices[1046] DNS update failed!
    12/8/08 12:19:39 PM com.apple.DirectoryServices[1046] DirectoryService(1046,0xb031c000) malloc: * error for object 0x94de1a40: Non-aligned pointer being freed (2)
    12/8/08 12:19:39 PM DirectoryService[1046] DirectoryService(1046,0xb031c000) malloc: * error for object 0x94de1a40: Non-aligned pointer being freed (2)
    * set a breakpoint in mallocerrorbreak to debug
    12/8/08 12:19:39 PM com.apple.DirectoryServices[1046] * set a breakpoint in mallocerrorbreak to debug
    12/8/08 12:19:39 PM DirectoryService[1046] Failed to changed computer password in Active Directory domain calacademy.org
    12/8/08 12:19:39 PM com.apple.DirectoryServices[1046] Enter machine password:
    12/8/08 12:19:40 PM com.apple.DirectoryServices[1046] Successfully registered hostname with DNS

  • OSX 10.8.2 Change expired Active Directory password at logon screen doesnt work

    Hello
    My system:
    MacBook Pro 2012
    OSX 10.8.2
    I have a problem with changing e expired Active Directory password at the logon screen.
    If i type in the old and the new passwort, it appears a message with following text:
    "The password does not meet the requirements of the server"
    Even if i type in a password like Tes0t!*2013, the message appears and i can not
    change the password.
    I have already disabled the "password must meet the password complexity requierements" policy in our default domain policy.
    Does anyone know how to solve this problem?
    Thanks.
    Dani

    Safe Boot , (holding Shift key down at bootup), use Disk Utility from there to Repair Permissions, test if things work OK in Safe Mode.
    Then move these files to the Desktop...
    /Users/YourUserName/Library/Preferences/com.apple.finder.plist
    /Users/YourUserName/Library/Preferences/com.apple.systempreferences.plist
    /Users/YourUserName/Library/Preferences/com.apple.sidebarlists.plist
    /Users/YourUserName/Library/Preferences/com.apple.desktop.plist
    /Users/YourUserName/Library/Preferences/com.apple.recentitems.plist
    Reboot & test.
    PS. Safe boot may stay on the gray radian for a long time, let it go, it's trying to repair the Hard Drive.

  • Problem in provisioning user from oim to active directory using ssl

    hi,
    problem in provisioning user from oim to active directory using ssl i am getting following error while provisioning user to AD.
    15:18:12,984 ERROR [ADCS] Communication Errorsimple bind failed: 172.16.30.35:636
    15:18:12,984 ERROR [ADCS] The error occured in tcADUtilLDAPController::connectTo
    AvailableAD():simple bind failed: 172.16.30.35:636
    15:18:13,015 ERROR [SERVER] Class/Method: tcProperties/tcProperties encounter so
    me problems: Must set a query before executing
    com.thortech.xl.dataaccess.tcDataSetException: Must set a query before executing
    at com.thortech.xl.dataaccess.tcDataSet.checkExecute(Unknown Source)
    at com.thortech.xl.dataaccess.tcDataSet.executeQuery(Unknown Source)
    at com.thortech.xl.dataobj.tcDataSet.executeQuery(Unknown Source)
    at com.thortech.xl.dataaccess.tcDataSet.executeQuery(Unknown Source)
    at com.thortech.xl.dataobj.tcDataSet.executeQuery(Unknown Source)
    at com.thortech.xl.dataobj.util.tcProperties.<init>(Unknown Source)
    at com.thortech.xl.dataobj.util.tcProperties.initialize(Unknown Source)
    at Thor.API.tcUtilityFactory.getLocalUtility(Unknown Source)
    at Thor.API.tcUtilityFactory.getUtility(Unknown Source)
    at com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.co
    nnectToAvailableNextAD(Unknown Source)
    at com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.se
    archResultPageEnum(Unknown Source)
    at com.thortech.xl.schedule.tasks.ADLookupRecon.performReconciliation(Un
    known Source)
    at com.thortech.xl.schedule.tasks.ADLookupReconTask.execute(Unknown Sour
    ce)
    at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.run(Unknown Source)
    at com.thortech.xl.scheduler.core.quartz.QuartzWrapper$TaskExecutionActi
    on.run(Unknown Source)
    at Thor.API.Security.LoginHandler.jbossLoginSession.runAs(Unknown Source
    at com.thortech.xl.scheduler.core.quartz.QuartzWrapper.execute(Unknown S
    ource)
    at org.quartz.core.JobRunShell.run(JobRunShell.java:203)
    at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.j
    ava:520)
    can any one help.
    Thanks and Regards,
    praveen,

    Are you able to connect to AD over SSL through some LDAP Browser ?
    Check the validity of Certificate ?
    Does your certificate appear in the list ?

  • User login report in Active Directory for specific date and time

    I want to get User login report in Active Directory for specific date and time e.g user logged in at15-01-2015 from 8:00am to 4:00pm
    Is any query, script or any tool available?
    Waiting for reply please

    You can identify the last logon date and time using my script here: https://gallery.technet.microsoft.com/scriptcenter/Get-Active-Directory-User-bbcdd771
    If you would like to get back in time and see when the user did a logon / logoff then you need to have auditing enabled. Once done, you can records from Security log in the event viewer: https://social.technet.microsoft.com/Forums/windowsserver/en-US/98cbecb0-d23d-479d-aa65-07e3e214e2c7/manage-active-directory-users-logon-logoff-events
    I have started a Wiki about how to track logon / logoff and it can help too: http://social.technet.microsoft.com/wiki/contents/articles/20422.record-logon-logoff-activities-on-domain-servers-and-workstations-using-group-policy.aspx
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Can't change macbook keychain password , 'invalid entry'

    I can't change macbook keychain password ,I get a notice 'invalid entry'. I have changed the password on my login account and was trying to change the keychain login password.  Any suggestions?

    Hi,
    One of our users has iMac, 10.6.8.
    She has not got any local account.
    She logs on to AD domain, with domain ID
    When after 40 days or so she is asked the change the password; it does not work.
    If we change it for here through AD or through another Windows PC, it works.
    Could you please let me know the best course of action for this type of users who are not administrators of iMac?
    I tested by changing my account's PAssword and it worked( I have administrative role).
    Kind regards

  • How can i change the directory permissions?

    my xampp htdocs directory does not include me as a user but has Nobody? how can i change the directory permissions because i cannot edit a file?
    Thank you

    Select the directory, CMD+I, go to the bottom, unlock the lock, and add yourself to the list with R&W permissions.

  • How can we change local administrator password in 500 machines in a domain from a centralized location?

    How can we change local administrator password in 500 machines in a domain from a centralized location?

    This was moved out of the Profile forum.
    You should ask this question at
    www.answers.microsoft.com.
    Or I can move it into another forum if you'd like.
    Thanks!
    Ed Price a.k.a User Ed, Microsoft Experience Program Manager (Blog,
    Twitter,
    Wiki)

  • HT1338 how can i change an installer password? My Apple pw dosen't seem to work Thanks

    how can i change an installer password? My Apple pw dosen't seem to work> Thanks

    Hi..
    I think you mean your admin password.
    For Lion v10.7 >  OS X Lion: Apple ID can be used to reset your user account password
    edited by:  cs

  • I bought a new iPad Air and gave my ipad 2 to my partner. How can I change ownership and passwords and accounts to her.

    I bought a new iPad Air and gave my old iPad 2 to my partner. If I add music or games etc to mine then they also appear on hers. Can i change ownership and passwords etc so they are individual iPads. Annoying when deleting one and also deletes other automatically an visa versa( add music to one and adds to other). I now hang a storage problems on iPad 2.

    Look at this link.
    Giving your former iPad to a spouse or family member: the quick guide
    http://www.tuaw.com/2012/03/17/giving-your-former-ipad-to-a-spouse-or-family-mem ber-the-quick/
    What to do before selling or giving away your iPhone, iPad, or iPod touch
    http://support.apple.com/kb/HT5661
    Find My iPhone Activation Lock: Removing a device from a previous owner’s account
    http://support.apple.com/kb/ts4515
    Buying or Selling a Used iPhone or iPad Running iOS 7? Read This First!
    http://www.makeuseof.com/tag/buying-or-selling-a-used-iphone-running-ios-7-read- this-first/
     Cheers, Tom

  • Why since I updated Mac OS X v10.7 Lion, I can not change my Principal Password

    Why since I updated Mac OS X v10.7 Lion, I can not change my Principal Password

    I Get there, but there is not option for reset Paswword just Restore, Reinstall Lion, Utilities Disk. My works to star my computer but i can`t change it from User and Group

  • Could we have same name's for User and Groups in Active directory

    When iam trying to create a user name " Logistics " under a OU, I am getting a error
    "The pre-windows 2000 logon name you have chosen is already in use in this domain. Choose  aother pre-windows logon name, and then try again"
    We already have a group by the name " Logistics "
    Could we have same name's for User and Groups in Active directory?
    Thanks in Advance

    sAMaccountName attribute is unique. So, the short answer is you cannot.
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

Maybe you are looking for

  • Struggling to get a signal from my Midi Keyboard

    I have Logic Pro X and a couple of weeks ago managed to successfully connect up by Korg Workstation to act as a Midi Keyboard so that I could access the library and play the sounds in real time  through the keyboard. I have just moved my studio to a

  • Pass multiple values to a prompt in Design Stduio

    Hi, I have a design studio dashboard based on a universe. There is a listbox filter in the dashboard. The users can select single or multiple values from the listbox. We need to pass those values to a prompt in one of the data sources. It works fine

  • Photoshop Elements 10 problem installing Win 7

    I have tried downloading then installing PSE10 on 64bit Win 7, got an error stating cannot run missing files please reinstall. Tried that to no effect other than a repeat several times. So I bought the disc's and uninstalled, ran disc cleanup and tri

  • Could not load jdbc driver

    Hello; I failed to connect with my database, it give me the massage as following; Cannot load the SQL driver. Include it in your classpath Could anyone tell me why? Thanks And i am using the Microsoft SQL server 2000, Java 2 runtime enviroment and Mi

  • 5th generation iPod touch won't sync.

    I've had this iPod for about 2 months now. I've connected to my iTunes before and it worked fine. When trying to put more music on it today, it wouldn't sync with iTunes. I tried simple things like restarting the iPod and restarting my computer but t