Active Directory Passwords

jvandyke · 11-18-2005, 09:26 AM

Okay, I, perhaps foolishly, decided not to set up passwords in AD for my students, trying to make things easier. Now AD is demandind a password change (despite the accounts settings set to never expire and none demanded).
They cannot change their passwords as leaving the old password field blank, won't make the "apply" button active.
I can log into a Windows XP station, which prompts for a password too, but there I can change it okay.
any way to fix this other than logging in as every user on an xp box!!!
PS
I think I found my mistake on teh AD side, I was confusing "account never expires" with "password never expiring, duh. I should have checked that box in the password portion of the AD users Profile. Live and learn, still, how do I get Tiger to allow users to change password when original password is blank?

Raven · 11-24-2005, 09:37 AM

I'm not sure for the AD side, but since you did not have the password expires field checked, they may have to all change passwords at least once, unless you can find a way to reset the expiry time for them... And I think its only with the latest version of Tiger that you can get a proper prompt and can change the AD password from a Mac... But I don't have all my docs with me, so I may be wrong on that last one.

jvandyke · 11-24-2005, 11:33 AM

What I did was at the server, set the password to never expire (even though users were already getting pompts to reset) and they no longer got prompted and old passwords (blank) worked fine, so situation resolved.
It should be noted though that users were unable to reset their passwords from Tiger when there was no password to start with (blank). Others who had a password already were able to change it from Tiger.

jvandyke · 02-03-2006, 09:03 AM

have since given each user a password on their AD accounts. But I've got several accounts that cannot authenticate on AD, sort of.
If the user is on "their" workstation their attempts to authenticate to AD fail, using "connect to server" and servers IP address.
If on a windows box, or other Mac station, no problem. This is very strange. I've repaired permissions, rebuilt the account on AD, rebuilt the account on the eMac, but still no go. Thoughts?

Raven · 02-03-2006, 12:05 PM

Question : when they try to connect via their own workstation, does the connect to server simply give an authentication error, or do they get the authentication prompt and that doesn't get accepted ?

11-18-2005, 09:26 AM	#1
jvandyke Prospect Join Date: Oct 2005 Posts: 29	Active Directory Passwords Okay, I, perhaps foolishly, decided not to set up passwords in AD for my students, trying to make things easier. Now AD is demandind a password change (despite the accounts settings set to never expire and none demanded). They cannot change their passwords as leaving the old password field blank, won't make the "apply" button active. I can log into a Windows XP station, which prompts for a password too, but there I can change it okay. any way to fix this other than logging in as every user on an xp box!!! PS I think I found my mistake on teh AD side, I was confusing "account never expires" with "password never expiring, duh. I should have checked that box in the password portion of the AD users Profile. Live and learn, still, how do I get Tiger to allow users to change password when original password is blank? Last edited by jvandyke; 11-18-2005 at 09:29 AM. Reason: clarfication

11-24-2005, 09:37 AM	#2
Raven Hall of Famer Join Date: Jul 2003 Location: Montreal Posts: 4,782	I'm not sure for the AD side, but since you did not have the password expires field checked, they may have to all change passwords at least once, unless you can find a way to reset the expiry time for them... And I think its only with the latest version of Tiger that you can get a proper prompt and can change the AD password from a Mac... But I don't have all my docs with me, so I may be wrong on that last one. __________________ Waffled foreheads are a symptom of broken keyboards and inexperienced users

02-03-2006, 12:05 PM	#5
Raven Hall of Famer Join Date: Jul 2003 Location: Montreal Posts: 4,782	Question : when they try to connect via their own workstation, does the connect to server simply give an authentication error, or do they get the authentication prompt and that doesn't get accepted ? __________________ Waffled foreheads are a symptom of broken keyboards and inexperienced users

Thread Tools
Show Printable Version Email this Page
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread:

11-24-2005, 11:33 AM	#3
jvandyke Prospect Join Date: Oct 2005 Posts: 29	What I did was at the server, set the password to never expire (even though users were already getting pompts to reset) and they no longer got prompted and old passwords (blank) worked fine, so situation resolved. It should be noted though that users were unable to reset their passwords from Tiger when there was no password to start with (blank). Others who had a password already were able to change it from Tiger.

02-03-2006, 09:03 AM	#4
jvandyke Prospect Join Date: Oct 2005 Posts: 29	have since given each user a password on their AD accounts. But I've got several accounts that cannot authenticate on AD, sort of. If the user is on "their" workstation their attempts to authenticate to AD fail, using "connect to server" and servers IP address. If on a windows box, or other Mac station, no problem. This is very strange. I've repaired permissions, rebuilt the account on AD, rebuilt the account on the eMac, but still no go. Thoughts?