Windows 2008 R2 Active Directory User can not change their password

Our AD domain already having two domain controllers with windows 2008 (not R2),  last week we added one more domain controler with windows 2008 R2 for that we run domain prep and forestprep. After this domain no  users can change their password by pressing ALT+CTRL+Del--Change password. Administrators can still reset the password, and if administrator provide the option change password and at next logon, it works, users can reset the password. But after login they can not.
The error telling the new password does not meet length,complexity, history requirements. We are sure their is no Group policy which setting password/account policy. And even we tried to attach a simple password policy domain level with out complexity.
Please provide a feedback..waiting for your response.
Thanks

additional info: up to Server 2008 R2, Windows ONLY supports ONE Password policy PER Domain. (exept: the R2 supports more pw-policies, but not with gpo, it has to be congifured with ADSI-Editor)
So, in case you still use the 2008 / R2 - you Need to know that ;))
regard..
Stephan Ertel - MCITP/MCSA -
From Windows 2008(Non R2) and higher is supported for more than one password policy with fine granted password polcy.DFL should be 2008.
HTH
Biswajit Biswas
My
Blogs|MCC
|
TNWiki
Ninja  
Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin

Similar Messages

  • LMS 2.6 and ACS 4.2 compatible with Windows 2008 R2 Active Directory?

    Hi,
    We are planning to upgrade CORP Domain from Windows 2003 Active Directory Schema to Windows 2008 R2 Active Directory Schema.
    I wanted to know if the following applications which are installed on windows (domain member servers) are compatible with windows 2008 server R2 schema?
    CiscoWorks LAN Management Solution 2.6
    Cisco Secure Access Control System 4.2
    Cisco Fabric Manager 1.5
    Any help is much appreciated!

    - CiscoWorks LAN Management Solution 2.6 - Not supported and this software is EOS-EOL.
    www.cisco.com/en/US/prod/collateral/netmgtsw/ps6504/ps6528/ps2425/prod_end-of-life_notice0900aecd80532c07.html
    - Cisco Secure Access Control System 4.2 - Not supported either:
    http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/installation/guide/windows/install.html#wp1041324
    - Cisco Fabric Manager 1.5 - Was not able to find anything for version 1.5 and not really familiar with this product.  However, according to the below not even version 4.2(7d) supports 2008:
    www.cisco.com/en/US/docs/switches/datacenter/mds9000/sw/fm/release/notes/20325_10.html#wp657668

  • Using LDAP in 9.3.1, I can got the user list but can not use their password

    Hey guys, I need your help.
    I am using msad for Shared Services External Authentication.
    I configurate the msad successfully.
    And I could find the user in local domain. But I can not use their password in workspace.
    That mean's I could find the user in local domain and do the provision job.
    But I can not use their password in localdomain to login on workspace.
    Is there any thing I missed when configurate the Shared Services?
    Need your help.

    you may have trouble -
    if password use NATIONAL character, such letters like (я ч ъ ю )
    if user, who's have access from SS to AD under "NATIONAL" folder
    p.s. my settings for AD
    Name: NTLM Domain NAME
    Hostname: x.x.x.x
    Port: 389
    Base DN: DC=NAME,DC=domain suffix
    User DN: CN=user_name, CN=Users Catalog
    Login: sAMAccountName
    Email: mail

  • HT5787 My apple id has been hacked. hacker has changed all information in the apple id so I can not change the password. Account information from the apple id created is still in my mail. How do I regain apple id. Thanks

    My apple id has been hacked. hacker has changed all information in the apple id so I can not change the password. Account information from the apple id created is still in my mail. How do I regain apple id. Thanks

    Contact Apple support: Apple ID: Contacting Apple for help with Apple ID account security

  • My old itunes id was an email that no longer can be used, therefore, I can not change the password for that account.  Everything that I purchased under that id name will not play.  How can I fix this?

    My old itunes id was an email that no longer can be used, therefore, I can not change the password for that account.  Everything that I purchased under that id name will not play.  How can I fix this?

    I no longer have an email address that was also my Apple ID. Can I still use the email address as my Apple ID?
    Apple recommends you change your Apple ID to your current, working email address. This will not create another Apple ID, it will only change it to your working email address. See Changing the name you use for your Apple ID if you'd like more information.
    Note: @mac.com and @me.com Apple IDs can not be renamed.  If you no longer use the .mac or .me email address be sure to add your valid email address as an additional email address.
    From here  >  http://support.apple.com/kb/HT5622?viewlocale=en_US
    If necessary...
    Contact iTunes Customer Service and request assistance
    Use this Link  >  Apple  Support  iTunes Store  Contact

  • Active Directory users unable to change passwords

    I have about 10 Macs running 10.4.11 that are bound to Active Directory (Windows 2000 Server).
    Users see the warning that their password is about to expire. However, for users who have a local account on the machine, when they attempt to change their password via System Prefs, only the local password is changed - the Active Directory password remains unchanged.
    For users who do not have a local account on the machine, this error occurs:
    "You cannot change your password to the password you entered. Your system administrator may not allow you to change your password or there was some other problem with your password."
    We have the following password requirements in place via Group Policy: complexity, length, min age (2 days), max age (90 days), history (last 4 remembered).
    Has anyone else encountered this?
    Thanks.

    Sign me up as well. I dont remember this being an issue before 10.5.5. I notice that it makes directory services crash and makes a crash report. I'll paste below.
    Note: the time appears to be synced properly with the domain controller-BUT i can an error in the console saying:
    com.apple.service_helper[6492]: launchctl: Error unloading: org.ntp.ntpd
    com.apple.launchd[1] (org.ntp.ntpd): Unknown key: SHAuthorizationRight
    I am able to communicate with time server via ntpq -inp
    Directory Service Crash Report:
    Process: DirectoryService [34]
    Path: /usr/sbin/DirectoryService
    Identifier: DirectoryService
    Version: ??? (???)
    Code Type: X86 (Native)
    Parent Process: launchd [1]
    Date/Time: 2008-12-05 16:38:09.091 -0800
    OS Version: Mac OS X 10.5.5 (9F33)
    Report Version: 6
    Exception Type: EXCBADACCESS (SIGSEGV)
    Exception Codes: KERNINVALIDADDRESS at 0x00000000c018096b
    Crashed Thread: 2
    Thread 0:
    0 libSystem.B.dylib 0x94a734a6 machmsgtrap + 10
    1 libSystem.B.dylib 0x94a7ac9c mach_msg + 72
    2 com.apple.CoreFoundation 0x948ef0ce CFRunLoopRunSpecific + 1790
    3 com.apple.CoreFoundation 0x948efd54 CFRunLoopRun + 84
    4 DirectoryService 0x000173ff main + 2767
    5 DirectoryService 0x00016912 start + 54
    Thread 1:
    0 libSystem.B.dylib 0x94a734a6 machmsgtrap + 10
    1 libSystem.B.dylib 0x94a7ac9c mach_msg + 72
    2 com.apple.CoreFoundation 0x948ef0ce CFRunLoopRunSpecific + 1790
    3 com.apple.CoreFoundation 0x948efd54 CFRunLoopRun + 84
    4 DirectoryService 0x000235bc CPluginRunLoopThread::ThreadMain() + 222
    5 ...ectoryServiceCore.Framework 0x00167f83 DSCThread::Run() + 39
    6 ...ectoryServiceCore.Framework 0x0016818e DSLThread::_RunWrapper(void*) + 84
    7 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
    8 libSystem.B.dylib 0x94aa45b2 thread_start + 34
    Thread 2 Crashed:
    0 libobjc.A.dylib 0x94de1688 objc_msgSend + 24
    1 ...oryService.Active Directory 0x00305eaf -[ADSPluginNode changePassword:recordName:oldPassword:newPassword:] + 767
    2 ...oryService.Active Directory 0x003415ee BaseDirectoryPlugin::DoSimplePasswordChange(sBDPINodeContext*, __CFString const*, tDataBuffer*) + 682
    3 ...oryService.Active Directory 0x00340b76 BaseDirectoryPlugin::DoAuthentication(sDoDirNodeAuth*, char const*, CDSAuthParams&) + 718
    4 ...oryService.Active Directory 0x00346aca BaseDirectoryPlugin::ProcessRequest(void*) + 1376
    5 ...oryService.Active Directory 0x0030ebae ADSPlugin::ProcessRequest(void*) + 66
    6 ...oryService.Active Directory 0x0033fc5c _ProcessRequest(void*, void*) + 92
    7 DirectoryService 0x00002d8d CRequestHandler::HandlePluginCall(sComData**) + 775
    8 DirectoryService 0x00003b48 CRequestHandler::HandleRequest(sComData**) + 82
    9 DirectoryService 0x0002ec71 dsmigdo_apicall + 543
    10 DirectoryService 0x00060df4 Xapicall + 407
    11 DirectoryService 0x00060aa0 DirectoryServiceMIG_server + 109
    12 DirectoryService 0x00026d08 dsmigdemux_notify(mach_msg_headert*, machmsg_headert*) + 86
    13 libSystem.B.dylib 0x94ae8ed3 machmsgserver + 343
    14 DirectoryService 0x000237f5 CMigHandlerThread::ThreadMain() + 303
    15 ...ectoryServiceCore.Framework 0x00167f83 DSCThread::Run() + 39
    16 ...ectoryServiceCore.Framework 0x0016818e DSLThread::_RunWrapper(void*) + 84
    17 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
    18 libSystem.B.dylib 0x94aa45b2 thread_start + 34
    Thread 3:
    0 libSystem.B.dylib 0x94a7a68e _semwaitsignal + 10
    1 libSystem.B.dylib 0x94acb8e0 pthreadcondtimedwait$UNIX2003 + 72
    2 ...ectoryServiceCore.Framework 0x00168409 DSEventSemaphore::WaitForEvent(long) + 191
    3 DirectoryService 0x00043200 CSearchPlugin::CheckNodes(tDirPatternMatch, int*, DSEventSemaphore*) + 1120
    4 DirectoryService 0x000432f9 CSearchPluginHandlerThread::ThreadMain() + 101
    5 ...ectoryServiceCore.Framework 0x00167f83 DSCThread::Run() + 39
    6 ...ectoryServiceCore.Framework 0x0016818e DSLThread::_RunWrapper(void*) + 84
    7 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
    8 libSystem.B.dylib 0x94aa45b2 thread_start + 34
    Thread 4:
    0 libSystem.B.dylib 0x94a7a68e _semwaitsignal + 10
    1 libSystem.B.dylib 0x94acb8e0 pthreadcondtimedwait$UNIX2003 + 72
    2 ...ectoryServiceCore.Framework 0x00168409 DSEventSemaphore::WaitForEvent(long) + 191
    3 DirectoryService 0x00043200 CSearchPlugin::CheckNodes(tDirPatternMatch, int*, DSEventSemaphore*) + 1120
    4 DirectoryService 0x000432f9 CSearchPluginHandlerThread::ThreadMain() + 101
    5 ...ectoryServiceCore.Framework 0x00167f83 DSCThread::Run() + 39
    6 ...ectoryServiceCore.Framework 0x0016818e DSLThread::_RunWrapper(void*) + 84
    7 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
    8 libSystem.B.dylib 0x94aa45b2 thread_start + 34
    Thread 5:
    0 libSystem.B.dylib 0x94aa3f66 kevent + 10
    1 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
    2 libSystem.B.dylib 0x94aa45b2 thread_start + 34
    Thread 6:
    0 libSystem.B.dylib 0x94ac35e2 select$DARWIN_EXTSN + 10
    1 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
    2 libSystem.B.dylib 0x94aa45b2 thread_start + 34
    Thread 7:
    0 libSystem.B.dylib 0x94ab61d5 syscall + 5
    1 ...ectoryServiceCore.Framework 0x00167f83 DSCThread::Run() + 39
    2 ...ectoryServiceCore.Framework 0x0016818e DSLThread::_RunWrapper(void*) + 84
    3 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
    4 libSystem.B.dylib 0x94aa45b2 thread_start + 34
    Thread 8:
    0 libSystem.B.dylib 0x94a734a6 machmsgtrap + 10
    1 libSystem.B.dylib 0x94a7ac9c mach_msg + 72
    2 libSystem.B.dylib 0x94ad0dc1 machmsg_serveronce + 318
    3 DirectoryService 0x00023768 CMigHandlerThread::ThreadMain() + 162
    4 ...ectoryServiceCore.Framework 0x00167f83 DSCThread::Run() + 39
    5 ...ectoryServiceCore.Framework 0x0016818e DSLThread::_RunWrapper(void*) + 84
    6 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
    7 libSystem.B.dylib 0x94aa45b2 thread_start + 34
    Thread 2 crashed with X86 Thread State (32-bit):
    eax: 0x0028c030 ebx: 0x94fa606b ecx: 0x94e7d334 edx: 0xc018094b
    edi: 0x00000001 esi: 0x00600fe0 ebp: 0xb01027e8 esp: 0xb0102678
    ss: 0x0000001f efl: 0x00010206 eip: 0x94de1688 cs: 0x00000017
    ds: 0x0000001f es: 0x0000001f fs: 0x0000001f gs: 0x00000037
    cr2: 0xc018096b
    Binary Images:
    0x1000 - 0x10ffff +DirectoryService ??? (???) <4c56e8e1e57b70096f86b84a52d49c0a> /usr/sbin/DirectoryService
    0x160000 - 0x16eff3 com.apple.DirectoryServiceCore.Framework 3.5.5 (3.5.5) <29a684df6d0a0fafe87aeabaa5ca72c9> /System/Library/PrivateFrameworks/DirectoryServiceCore.framework/Versions/A/Dir ectoryServiceCore
    0x19b000 - 0x19dffc apop.so ??? (???) <af168e2e8b86c66628d8b1d44b646cb7> /usr/lib/sasl2/apop.so
    0x1a1000 - 0x1a9fff digestmd5WebDAV.so ??? (???) <192fc897aeea8b4c8fe66dcef8137a95> /usr/lib/sasl2/digestmd5WebDAV.so
    0x1ca000 - 0x1ccfff libanonymous.2.so ??? (???) <161902c9ed78dce78b61125c7c155f0f> /usr/lib/sasl2/libanonymous.2.so
    0x1e3000 - 0x1e5ffc libcrammd5.2.so ??? (???) <c917c89eefddcfcacf48c939c3af12aa> /usr/lib/sasl2/libcrammd5.2.so
    0x1e9000 - 0x1f2ffb libdigestmd5.2.so ??? (???) <c8595204acd0e7cb362b33d008693019> /usr/lib/sasl2/libdigestmd5.2.so
    0x1f6000 - 0x1fafff libgssapiv2.2.so ??? (???) <a47ee23249e7c36aee418a6e7fd3a502> /usr/lib/sasl2/libgssapiv2.2.so
    0x300000 - 0x358ffc com.apple.DirectoryService.Active Directory 1.6.3 (1.6.3) <aeaf0f5bed2b48a776a4567154f3fa66> /System/Library/Frameworks/DirectoryService.framework/Resources/Plugins/Active Directory.dsplug/Contents/MacOS/Active Directory
    0x377000 - 0x38ffe2 dhx.so ??? (???) <8144ab11b8201f120dc87f3ec57d0714> /usr/lib/sasl2/dhx.so
    0x39e000 - 0x3a0ffc login.so ??? (???) <03d28ec908a6ed9abee1b25fe87716ef> /usr/lib/sasl2/login.so
    0x3a4000 - 0x3abffc libotp.2.so ??? (???) <0b7c8cd165835331c586e49465ef1186> /usr/lib/sasl2/libotp.2.so
    0x3b5000 - 0x3b7ffc libplain.2.so ??? (???) <5992f1149ff6cc7fadafa2bfd4ecc00a> /usr/lib/sasl2/libplain.2.so
    0x3bb000 - 0x3c0ffc libpps.so ??? (???) <31fe03649320e2f8b5404b179684d23a> /usr/lib/sasl2/libpps.so
    0x3c6000 - 0x3c9fff mschapv2.so ??? (???) <5c0fc0400a600f7c2d29ecbf95bc6017> /usr/lib/sasl2/mschapv2.so
    0x3cd000 - 0x3cfffc shadow_auxprop.so ??? (???) <b90c297da0fdf1bf0252ea496fbe83f2> /usr/lib/sasl2/shadow_auxprop.so
    0x3d5000 - 0x3d7ffd smb_lm.so ??? (???) <b0e54904b8dcecaa7d98c39841d03528> /usr/lib/sasl2/smb_lm.so
    0x3db000 - 0x3ddffc smb_nt.so ??? (???) <f927d77c27a795c0e7bb8478a47b83ed> /usr/lib/sasl2/smb_nt.so
    0x3e1000 - 0x3e4ff0 smb_ntlmv2.so ??? (???) <a31a5d3a2184c97ecb945c6cbd308da9> /usr/lib/sasl2/smb_ntlmv2.so
    0x3f8000 - 0x3f9fff com.apple.odlocate 1.1 (1.1) <58ace87ddfcba42df58856cabf3b6633> /System/Library/KerberosPlugins/KerberosFrameworkPlugins/ODLocate.bundle/Conten ts/MacOS/ODLocate
    0x436000 - 0x437ffc com.apple.KerberosHelper.LKDCLocate 1.1 (1.0) <cec0029c7e0345fee6e22aac185376c7> /System/Library/KerberosPlugins/KerberosFrameworkPlugins/LKDCLocate.bundle/Cont ents/MacOS/LKDCLocate
    0x8fe00000 - 0x8fe2da53 dyld 96.2 (???) <14ac3b684fa5a31932fa89c4bba7a29b> /usr/lib/dyld
    0x90315000 - 0x9039cff7 libsqlite3.0.dylib ??? (???) <6978bbcca4277d6ae9f042beff643f7d> /usr/lib/libsqlite3.0.dylib
    0x91d29000 - 0x91d54fe7 libauto.dylib ??? (???) <42d8422dc23a18071869fdf7b5d8fab5> /usr/lib/libauto.dylib
    0x91d55000 - 0x9202fff3 com.apple.CoreServices.CarbonCore 786.6 (786.6) <5682aae1e2cf5ae750d5a4dea98c084c> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonC ore.framework/Versions/A/CarbonCore
    0x922cf000 - 0x92313feb com.apple.DirectoryService.PasswordServerFramework 3.0.3 (3.0.3) <8135bb4f34a3bf02b8c2ca869fe33a42> /System/Library/PrivateFrameworks/PasswordServer.framework/Versions/A/PasswordS erver
    0x92793000 - 0x92812ff5 com.apple.SearchKit 1.2.1 (1.2.1) <3140a605db2abf56b237fa156a08b28b> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchK it.framework/Versions/A/SearchKit
    0x92891000 - 0x928a7fff com.apple.DictionaryServices 1.0.0 (1.0.0) <ad0aa0252e3323d182e17f50defe56fc> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/DictionaryServices
    0x928a8000 - 0x928dffff com.apple.SystemConfiguration 1.9.2 (1.9.2) <8b26ebf26a009a098484f1ed01ec499c> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfi guration
    0x92964000 - 0x929adfef com.apple.Metadata 10.5.2 (398.22) <a6b676925dd832780daf991e79adfebd> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadat a.framework/Versions/A/Metadata
    0x929ae000 - 0x929bcffd libz.1.dylib ??? (???) <5ddd8539ae2ebfd8e7cc1c57525385c7> /usr/lib/libz.1.dylib
    0x92a17000 - 0x92aa3ff7 com.apple.LaunchServices 290 (290) <61af37aac50984d220dd176f777e3b72> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchS ervices.framework/Versions/A/LaunchServices
    0x92aa4000 - 0x92bdcff7 libicucore.A.dylib ??? (???) <3d8fdaf51c2664ab620f1688203caf26> /usr/lib/libicucore.A.dylib
    0x939bf000 - 0x939c3fff com.apple.OpenDirectory 10.5 (10.5) <e7e4507f5ecd8c8cdcdb2fc0675da0b4> /System/Library/PrivateFrameworks/OpenDirectory.framework/Versions/A/OpenDirect ory
    0x93ecd000 - 0x93ed1fff libmathCommon.A.dylib ??? (???) /usr/lib/system/libmathCommon.A.dylib
    0x93f4d000 - 0x93f4dffa com.apple.CoreServices 32 (32) <2fcc8f3bd5bbfc000b476cad8e6a3dd2> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
    0x94105000 - 0x94123fff libresolv.9.dylib ??? (???) <a8018c42930596593ddf27f7c20fe7af> /usr/lib/libresolv.9.dylib
    0x94124000 - 0x941a8fe3 com.apple.CFNetwork 339.5 (339.5) <c6565c13b0356e1d4bb99a68398d558b> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwo rk.framework/Versions/A/CFNetwork
    0x94569000 - 0x94619fff edu.mit.Kerberos 6.0.12 (6.0.12) <da7253e3fb7e47e46cb46d47ed320ffc> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
    0x9485e000 - 0x9487cff3 com.apple.DirectoryService.Framework 3.5.5 (3.5.5) <4b81063df189bc462f012a169474fcbc> /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryServi ce
    0x9487d000 - 0x949affff com.apple.CoreFoundation 6.5.4 (476.15) <e2869ad6dc1dd289f21b305b0bea9158> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
    0x94a0c000 - 0x94a13fe9 libgcc_s.1.dylib ??? (???) <f53c808e87d1184c0f9df63aef53ce0b> /usr/lib/libgcc_s.1.dylib
    0x94a14000 - 0x94a71ffb libstdc++.6.dylib ??? (???) <04b812dcec670daa8b7d2852ab14be60> /usr/lib/libstdc++.6.dylib
    0x94a72000 - 0x94bd2ff3 libSystem.B.dylib ??? (???) <98fc91f31f185411ddc46d3225e9af55> /usr/lib/libSystem.B.dylib
    0x94dcc000 - 0x94eacfff libobjc.A.dylib ??? (???) <7b92613fdf804fd9a0a3733a0674c30b> /usr/lib/libobjc.A.dylib
    0x94ead000 - 0x94ebcfff libsasl2.2.dylib ??? (???) <b9e1ca0b6612e280b6cbea6df0eec5f6> /usr/lib/libsasl2.2.dylib
    0x94f87000 - 0x94f8effe libbsm.dylib ??? (???) <d25c63378a5029648ffd4b4669be31bf> /usr/lib/libbsm.dylib
    0x94fa0000 - 0x9521bfe7 com.apple.Foundation 6.5.6 (677.21) <5cfa0aa8b9b43193955d601ba6c2591a> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
    0x952ea000 - 0x9539cffb libcrypto.0.9.7.dylib ??? (???) <69bc2457aa23f12fa7d052601d48fa29> /usr/lib/libcrypto.0.9.7.dylib
    0x953fd000 - 0x95421feb libssl.0.9.7.dylib ??? (???) <c7359b7ab32b5f8574520746e10a41cc> /usr/lib/libssl.0.9.7.dylib
    0x95422000 - 0x954dcfe3 com.apple.CoreServices.OSServices 226.5 (226.5) <2a135d4fb16f4954290f7b72b4111aa3> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServi ces.framework/Versions/A/OSServices
    0x95ca1000 - 0x95e6ffff com.apple.security 5.0.4 (34102) <f01d6cbd6a0f24f6c13952ed448e77d6> /System/Library/Frameworks/Security.framework/Versions/A/Security
    0x966ac000 - 0x966bdffe com.apple.CFOpenDirectory 10.5 (10.5) <6a7f55108d77db7384d0e2219d07e9f8> /System/Library/PrivateFrameworks/OpenDirectory.framework/Versions/A/Frameworks /CFOpenDirectory.framework/Versions/A/CFOpenDirectory
    0x96d5e000 - 0x96e3fff7 libxml2.2.dylib ??? (???) <1baef3d4972ee789d8fa6c1fa44da45c> /usr/lib/libxml2.2.dylib
    0x96e40000 - 0x96e6ffe3 com.apple.AE 402.2 (402.2) <e01596187e91af5d48653920017b8c8e> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.fram ework/Versions/A/AE
    0x96e70000 - 0x96e94fff libxslt.1.dylib ??? (???) <4933ddc7f6618743197aadc85b33b5ab> /usr/lib/libxslt.1.dylib
    0x96e95000 - 0x96e9dfff com.apple.DiskArbitration 2.2.1 (2.2.1) <75b0c8d8940a8a27816961dddcac8e0f> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
    0x96f06000 - 0x96f91fff com.apple.framework.IOKit 1.5.1 (???) <324526f69e1443f2f9fb722cc88a23ec> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
    0x96f93000 - 0x96fc5fff com.apple.LDAPFramework 1.4.5 (110) <cc04500cf7b6edccc75bb3fe2973f72c> /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
    0xfffe8000 - 0xfffebfff libobjc.A.dylib ??? (???) /usr/lib/libobjc.A.dylib

  • User can't change expired password

    Hi,
    Using Solaris 9 Clients and DS 5.2p4.
    In my old NIS+ installation users with expired passwords (not expired accounts!!) where foreced to change their password during login.
    Now using ldap naming service, such users are NOT asked to change their passwords, they just can't login, seeing:
    Your password has expired.
    Access denied
    Using keyboard-interactive authentication.
    Password:Is this a bug, a feature or do I need to change my config?
    my pam.conf looks like:
    other   auth requisite          pam_authtok_get.so.1
    other   auth required           pam_dhkeys.so.1
    other   auth binding            pam_unix_auth.so.1 server_policy
    other   auth required           pam_ldap.so.1 use_first_pass
    other   account requisite       pam_roles.so.1
    other   account required        pam_projects.so.1
    other   account required        pam_unix_account.so.1 server_policy
    other   account required        pam_ldap.so.1
    other   password required       pam_dhkeys.so.1
    other   password requisite      pam_authtok_get.so.1
    other   password requisite      pam_authtok_check.so.1
    other   password required       pam_authtok_store.so.1 server_policyThe only workarround I found so far is, to change the account flag to optional
    other   account optional        pam_ldap.so.1This allows the user to login, but he is still not forces to change his password.

    There is a way arround.
    The password policy which appies to this user needs to have passwordExpireWithoutWarning=off.Than the user gets a "new chance". His passwordexpirationtime gets expended to the current date + passwordWarning periode. This allows the user to login and change his password. In adddition passwordexpwarned=1 for this user is set, to prevent doing this over and over.
    See Sun Document 75326
    http://sunsolve.sun.com/search/document.do?assetkey=1-25-75326-1
    Message was edited by:
    mzeilinger

  • Can not change root password for WCS

    Need to change the root password for the web gui.
    WCS is running on linux, i have tried to do the passwd user-root but it cames back saying it can not find the username.

    Alex
    You could use the recovering password procedure for wcs as a workaround (chapter 14 of the following link http://www.cisco.com/en/US/docs/wireless/wcs/7.0/configuration/guide/WCS70cg.html )
    Recovering the WCS Password
    You can change the WCS application root user or FTP user password. This option provides a safeguard if you lose the root password. An executable was added to the installer /bin directory (passwd.bat for Windows and passwd.sh for Linux). Follow these steps to recover the passwords and regain access to WCS. For password recovery on a wireless location device, refer to chapters 8 or 9 of the Cisco 2700 Series Location Appliance Configuration Guide.
    Note If you are a Linux user, you must be the root user to run the command.
    Step 1 Change to the WCS bin folder.
    Step 2 Perform one of the following:
    Enter passwd root-user newpassword to change the WCS root password. The newpassword is the root login password you choose.
    or
    Enter passwd location-ftp-user newuser newpassword to change the FTP user and password. The newuser and newpassword are the FTP user and password you choose.
    Step 3 The following options are available with these commands:
    •-q — to quiet the output
    •-pause — to pause before exiting
    •-gui — to switch to the graphical user interface
    •-force — to skip prompting for configuration
    Step 4 Start WCS.

  • Can not change my password for icloud anymore

    Hi,
    I changed my password to enter icloud on the web and now I am not able to access with my iphone the emails even though I enter the new password. What can I do

    Here you go:
    iCloud: Change your iCloud account password

  • Non Active Directory users are not able to access sharepoint top level site

    I have created a sharepoint group with read permission on top level site and I added the NON AD users to that group but the non ad users are unable to access top level site ,they are able to access remaining all subsites without any issue.I am facing
    this issue only with NON AD users....I have checked the page layouts , all the layouts are  in published mode.All the webparts and Lists on Default.aspx page has all users access permissions.Do I need to change anything in central administration
    for this webapplication.

    Hi,
    Could you please reproduce the issue and collect error information in ULS log for troubleshooting?
    For your convenience:
    http://blogs.msdn.com/b/opal/archive/2009/12/22/uls-viewer-for-sharepoint-2010-troubleshooting.aspx
    Regards,
    Rebecca Tu
    TechNet Community Support
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
    [email protected]

  • Can not change mail password in os7

    After changing password always get message that password is not right.
    The only way around this was to wipe the phone and start over.

    ipad 1s now doing same thing after trying to change password in os7

  • ISE 1.2 Guest portal user cannot change their passwords

    I have a WLC 5508(version 7.6) and a server installed  the ISE (version 1.2.1.198)，Now we configured the CWA，Use guest portal as an employee and guest login url，We can use the manually create internal user and password successfully logged in, and we set up allow guest users to change password in Multi-Portal, but the user can not change the password in the guest portal ,I suspect the change password option on the Guest  Portal actually works? Can anyone tell me how to change their own username password in the guest portal ?

    Requiring Guests to Change Password
    You can allow or require guest users to change their password after their initial account credentials are created by the sponsor. If guest users change their passwords, sponsors cannot provide guests with their login credentials if they are lost. The sponsor must create a new guest account.
    You can either allow guests to change their passwords, or you can require that they do it at expiration and at first login. To require internal users using a guest portal to change their password upon their next login, choose Administration > Identity Management > Identities > Users . Select the specific internal user from the Network Access Users list and enable the change password check box.
    Before You Begin
    Create a Guest portal or modify the DefaultGuestPortal. This setting is specific to each Guest portal.
    Step 1 Choose Administration > Web Portal Management > Settings > Guest > Multi-Portal Configuration.
    Step 2 Check the Guest portal to update and click Edit .
    Step 3 Click the Operations tab.
    Step 4 Check either or both options:
    Allow guest users to change password
    Require guest users to change password at expiration and first login
    Step 5 Click Save .

  • Window Active Directory users cannot see home drive when logon to Macs

    This problem just occurred, so that tells me either 10.4.9 has done it or a security update to Windows 2003 Server.
    Looking for any tech saavy network guru to help.
    Windows 2003 Server houses active directory. Users in the past were able to log on to a Macintosh computer and their home drive would appear on the desktop.
    Now 'all of a sudden' any user that logs onto a Macintosh computer with an AD account does not see their home drive on the desktop.
    Has anyone else had this problem? Any suggestions on how to resolve it? I haven't unbound the Mac from AD yet will try that tomorrow.
    JTS

    Fixed this...a corrupted keychain item that contained the users prior used network password was the culprit.
    Once I delted the corrupted keychain, active directory users can log on a Mac and see their home directory on the desktop.
    JTS

  • Building a Basic Runbook to disable a Active Directory User who has not logged in for 90 days.

    I am new to Orchestrator.  I am using Orchestrator 2012 R2 on a Hyper-V running Server 2008.  I have been trying to set up a Runbook to sweep AD for user accounts that have not logged in for 90 days and have those accounts automatically disabled
    and moved to another OU.  However, I would be happy just to have the account just be disabled.  If you need any more info or I have posted in the wrong forum, please let me know.  
    Thanks

    Hi,
    there is no SCO Activity to do this.
    Problem with this is, the LastLogedOn Times are not synced between DomainControllers.
    Best will be you take a look at this PowerShell Script
    http://gallery.technet.microsoft.com/scriptcenter/Get-Active-Directory-User-bbcdd771
    and change it to your needs
    Seidl Michael | http://www.techguy.at |
    twitter.com/techguyat | facebook.com/techguyat

  • Getting Active Directory Users in UCM User Admin - Users Tab

    Hello All
    We have integrated WLS with our Active Directory. And we are getting all the active directory users under Security Realms >myrealm >Users and Groups tab in WLS Console.
    We are also able to login to webcenter spaces and Content server using those userid and credentials. But our problem is in UCM under Admin Applets - User Admin - Users tab all the active directory users are not listed. So we are not able to assign particular roles to the users.
    When a particular Active Directory user logins in UCM (First Time) after that the admisistrator (weblogic) is able to get that user under Admin Applets - User Admin - Users tab. And also it comes as an External user so we are not able to assign role.
    So basically UCM requires a login to get all the users listed in users tab.
    Our requirement is we want all the Active Directory users to get listed in UCM without the condition that the users has to login in content server once.
    Thanks

    Hi Navin ,
    First and foremost the requirement that you have posted is not possible and the reason for that is :
    Users are created on AD which is outside the realm of UCM hence there is no way that the users created on AD will be shown up under Users tab without they login atleast once . UCM does not know which all users are part of the realm until and unless the AD users login in atleast once .
    Secondly external users cannot be assigned roles from UCM because when the Auth type is set to External UCM sees it as external entity hence not giving it any way to relate roles / groups from UCM . As a workaround you can change the AuthType for the External users to Global from User Admin applet after the users login for the first time . This will enable you to assign roles / groups for the AD users .
    Hope this helps .
    Thanks
    Srinath

Maybe you are looking for