Click here to get back home

Simple user/password management?

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Simple user/password management? Franc 07-06-2005
Posted by Franc on July 6, 2005, 11:50 am
Please log in for more thread options
Isn't there a simple way for users to manage/change their passwords on a 2K3
server? The clients are all Win2K, and the server is not a domain
controller. All the solutions I've seen that suggest using the NT Security
dialog/Change Password button don't work, apparently because there's no
domain to define. There must be an easy way that I'm just overlooking. It
used to be so simple.

Thanks, in advance, for any help you can provide.


Posted by Steven L Umbach on July 7, 2005, 1:59 am
Please log in for more thread options
Try having them specify the name of the server in the logon box which would
normally show the name of their computer. --- Steve


> Isn't there a simple way for users to manage/change their passwords on a
> 2K3
> server? The clients are all Win2K, and the server is not a domain
> controller. All the solutions I've seen that suggest using the NT
> Security
> dialog/Change Password button don't work, apparently because there's no
> domain to define. There must be an easy way that I'm just overlooking.
> It
> used to be so simple.
>
> Thanks, in advance, for any help you can provide.




Posted by Franc on July 7, 2005, 5:15 am
Please log in for more thread options
First of all, thanks for getting back to me, Steve. I've seen your name
associated with several posts regarding this issue.

I tried your suggestion, or at least your suggestion as I understood it. I
went to the initial Windows logon, and inserted the server name in the Domain
box - there are only three boxes; username, password, domain. It came back
with exactly the same error as when you enter the server name in the domain
box of the Change Password dialog, which is "The system cannot log you on now
because the domain 'servername' is not available."

Did I do the right thing? Any other suggestions?

Thanks again.

Franc



"Steven L Umbach" wrote:

> Try having them specify the name of the server in the logon box which would
> normally show the name of their computer. --- Steve
>
>
> > Isn't there a simple way for users to manage/change their passwords on a
> > 2K3
> > server? The clients are all Win2K, and the server is not a domain
> > controller. All the solutions I've seen that suggest using the NT
> > Security
> > dialog/Change Password button don't work, apparently because there's no
> > domain to define. There must be an easy way that I'm just overlooking.
> > It
> > used to be so simple.
> >
> > Thanks, in advance, for any help you can provide.
>
>
>


Posted by Steven L Umbach on July 7, 2005, 1:16 pm
Please log in for more thread options
I just tried this and it worked for me. I changed a local password on an XP
Pro SP2 computer from a Windows 2000 Pro computer. I did have initial
difficulty and found that you must first be logged onto your computer with
the correct logon/password that exists on the remote computer and then use
control-alt-delete as you describe. If you first change your password on
your computer it will not work. In other words change the password on the
remote computer first and then on your local computer.

If you continue to have difficulty then possibly you have firewall or ipsec
policy configured on the remote server that is not allowing the necessary
traffic for the password change and checking the firewall log for dropped
traffic [after enabling logging] may help. Also check the security log in
Event Viewer on the Windows 2003 server for any pertinent events that may
help troubleshoot the problem which is what I did as I initially found
failed logon attempts recorded from the remote computer/user when I tried to
change the password remotely. By default Windows 2003 should already have
logging of logon events and account management enabled. --- Steve


> First of all, thanks for getting back to me, Steve. I've seen your name
> associated with several posts regarding this issue.
>
> I tried your suggestion, or at least your suggestion as I understood it.
> I
> went to the initial Windows logon, and inserted the server name in the
> Domain
> box - there are only three boxes; username, password, domain. It came
> back
> with exactly the same error as when you enter the server name in the
> domain
> box of the Change Password dialog, which is "The system cannot log you on
> now
> because the domain 'servername' is not available."
>
> Did I do the right thing? Any other suggestions?
>
> Thanks again.
>
> Franc
>
>
>
> "Steven L Umbach" wrote:
>
>> Try having them specify the name of the server in the logon box which
>> would
>> normally show the name of their computer. --- Steve
>>
>>
>> > Isn't there a simple way for users to manage/change their passwords on
>> > a
>> > 2K3
>> > server? The clients are all Win2K, and the server is not a domain
>> > controller. All the solutions I've seen that suggest using the NT
>> > Security
>> > dialog/Change Password button don't work, apparently because there's no
>> > domain to define. There must be an easy way that I'm just overlooking.
>> > It
>> > used to be so simple.
>> >
>> > Thanks, in advance, for any help you can provide.
>>
>>
>>




Posted by Olaf Engelke [MVP Windows Serv on July 7, 2005, 3:26 pm
Please log in for more thread options
Hi Franc,
Franc wrote:
> Isn't there a simple way for users to manage/change their passwords
> on a 2K3 server? The clients are all Win2K, and the server is not a
> domain controller. All the solutions I've seen that suggest using
> the NT Security dialog/Change Password button don't work, apparently
> because there's no domain to define. There must be an easy way that
> I'm just overlooking. It used to be so simple.

why _must_ there be an easy way?
That is the difference between the Domain with central user management and
the Workgroup with local management.
If you prefer the local model let the users go to that server and change
their passwords there. Or use remote desktop for this - but since this is
mainly for administrative purposes I would consider this also a bad idea
from the point of security.
Where is the problem to use the server as Domain controller?

Best greetings from Germany
Olaf.



Similar ThreadsPosted
Downgrade BDC to simple server August 20, 2007, 2:13 am
Simple File Sharing question December 14, 2005, 10:26 pm
Simple question regarding Windows 2003 Firewall April 1, 2007, 11:35 pm
Password Management Issue July 11, 2005, 12:19 pm
Patch Management for Non-MS Products October 3, 2005, 1:13 pm
Re: Remote Computer Management December 7, 2005, 9:49 pm
User management issues July 20, 2006, 10:50 am
Securing management access? February 16, 2008, 7:52 am
DHCP Management and Windows Firewall January 3, 2006, 3:39 pm
FSRM remote management permissions June 11, 2007, 11:28 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap