Users are unable to change their passwords when the Active Directory objects are Protected by Change Auditor (4312863)

Chat now with support

Zurück

Feedback übermittelt

Konnten Sie mithilfe dieses Artikels ein Problem lösen?

Bewertung auswählen

Titel

Users are unable to change their passwords when the Active Directory objects are Protected by Change Auditor
Beschreibung

After configuring Change Auditor protection on a user object, the user is unable to update their password manually or when prompted by Windows.
Ursache

This is expected since the password attributes are protected and the user does not have permission to change them.
Lösung
RESOLUTION 1:

Add "SELF" (located in "Configuration | Well Known Security Principals") to the "Accounts Allowed to Access Protected Objects" of the protection template.

RESOLUTION 2:

Exclude the following list of attributes from protection:
- accountExpires
- badPasswordTime
- badPwdCount
- codePage
- countryCode
- dBCSPwd
- lastLogoff
- lastLogon
- lmPwdHistory
- logonCount
- ntPwdHistory
- primaryGroupID
- pwdLastSet
- sAMAccountType
- unicodePwd
- userAccountControl

Feedback übermittelt

Konnten Sie mithilfe dieses Artikels ein Problem lösen?

Bewertung auswählen

Empfohlener Inhalt

Titel