Ryfujk

What is the meaning of Triage in Cybersec world?

When should I buy a clipper card after flying to OAK?

How to type this arrow in math mode?

Looking for Correct Greek Translation for Heraclitus

Return to UK after having been refused entry years ago

What is the most effective way of iterating a std::vector and why?

Have you ever entered Singapore using a different passport or name?

How come people say “Would of”?

For what reasons would an animal species NOT cross a *horizontal* land bridge?

Is a "Democratic" Oligarchy-Style System Possible?

Should I use my personal e-mail address, or my workplace one, when registering to external websites for work purposes?

What does Linus Torvalds mean when he says that Git "never ever" tracks a file?

Does coating your armor in silver add any effects?

Can we generate random numbers using irrational numbers like π and e?

Can one be advised by a professor who is very far away?

If I score a critical hit on an 18 or higher, what are my chances of getting a critical hit if I roll 3d20?

What does ひと匙 mean in this manga and has it been used colloquially?

Can you compress metal and what would be the consequences?

Delete all lines which don't have n characters before delimiter

Landlord wants to switch my lease to a "Land contract" to "get back at the city"

Reference request: Oldest number theory books with (unsolved) exercises?

Why do we hear so much about the Trump administration deciding to impose and then remove tariffs?

What is the closest word meaning "respect for time / mindful"

Why isn't airport relocation done gradually?

Windows 10 - Unable to change domain password when password has expired and computer is locked

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}

1

We have recently migrated over to Windows 10 Pro Version 1511. Prior to that we were on Windows 7 Pro.

We have fast user switching disabled for all computers by group policy in our domain. It is quite common that users don't change their password even though they are given password expiration notice.

On Windows 7 clients when a domain users account password had expired after they had logged in and the computer gets locked (for lunch or they were idle) they came back to login and they were able to change the password as they had a switch user option as shown below.

However, in Windows 10 when the same situation happens we get the following prompt:

"Your password has expired. To set a new password, select OK, select Switch user, re-enter your current password, then follow the prompts on the screen.

So we click ok and now there is no longer a switch user option?

Has anyone come across this yet? Wonder if this is a bug in Windows 10 or a limitation of some kind?

windows-10

share|improve this question

edited Aug 22 '16 at 13:34

techraf

3,35181735

asked Aug 22 '16 at 10:31

Ashley HAshley H

612

bumped to the homepage by Community♦ 7 mins ago

This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Is there an "Other user" option from the login screen (bottom left-hand)? Is there a reason someone cannot just reset the AD password for the user (on a DC) requiring a change on login?
  
  – user987654321
  Aug 22 '16 at 14:30
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  No "other user" on the bottom left hand side I'm afraid. Yes that could be done but I'd consider that a workaround and am looking for a fix so end users can change their own password.
  
  – Ashley H
  Aug 22 '16 at 14:54
  
  
  

  
  
  
  

add a comment | 

1

We have recently migrated over to Windows 10 Pro Version 1511. Prior to that we were on Windows 7 Pro.

We have fast user switching disabled for all computers by group policy in our domain. It is quite common that users don't change their password even though they are given password expiration notice.

On Windows 7 clients when a domain users account password had expired after they had logged in and the computer gets locked (for lunch or they were idle) they came back to login and they were able to change the password as they had a switch user option as shown below.

However, in Windows 10 when the same situation happens we get the following prompt:

"Your password has expired. To set a new password, select OK, select Switch user, re-enter your current password, then follow the prompts on the screen.

So we click ok and now there is no longer a switch user option?

Has anyone come across this yet? Wonder if this is a bug in Windows 10 or a limitation of some kind?

windows-10

share|improve this question

edited Aug 22 '16 at 13:34

techraf

3,35181735

asked Aug 22 '16 at 10:31

Ashley HAshley H

612

bumped to the homepage by Community♦ 7 mins ago

This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Is there an "Other user" option from the login screen (bottom left-hand)? Is there a reason someone cannot just reset the AD password for the user (on a DC) requiring a change on login?
  
  – user987654321
  Aug 22 '16 at 14:30
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  No "other user" on the bottom left hand side I'm afraid. Yes that could be done but I'd consider that a workaround and am looking for a fix so end users can change their own password.
  
  – Ashley H
  Aug 22 '16 at 14:54
  
  
  

  
  
  
  

add a comment | 

We have recently migrated over to Windows 10 Pro Version 1511. Prior to that we were on Windows 7 Pro.

We have fast user switching disabled for all computers by group policy in our domain. It is quite common that users don't change their password even though they are given password expiration notice.

On Windows 7 clients when a domain users account password had expired after they had logged in and the computer gets locked (for lunch or they were idle) they came back to login and they were able to change the password as they had a switch user option as shown below.

However, in Windows 10 when the same situation happens we get the following prompt:

"Your password has expired. To set a new password, select OK, select Switch user, re-enter your current password, then follow the prompts on the screen.

So we click ok and now there is no longer a switch user option?

Has anyone come across this yet? Wonder if this is a bug in Windows 10 or a limitation of some kind?

windows-10

share|improve this question

edited Aug 22 '16 at 13:34

techraf

3,35181735

asked Aug 22 '16 at 10:31

Ashley HAshley H

612

share|improve this question

edited Aug 22 '16 at 13:34

techraf

3,35181735

asked Aug 22 '16 at 10:31

Ashley HAshley H

612

share|improve this question

edited Aug 22 '16 at 13:34

techraf

3,35181735

asked Aug 22 '16 at 10:31

Ashley HAshley H

612

edited Aug 22 '16 at 13:34

techraf

3,35181735

edited Aug 22 '16 at 13:34

techraf

3,35181735

asked Aug 22 '16 at 10:31

Ashley HAshley H

612

asked Aug 22 '16 at 10:31

Ashley HAshley H

612

2 Answers
2

active

oldest

votes

0

Might be related to windows update from August which disables falling back to NTLM from Kerberos https://technet.microsoft.com/en-us/library/security/ms16-101.aspx

share|improve this answer

answered Aug 25 '16 at 20:44

Stefan MihajlovicStefan Mihajlovic

114

add a comment | 

0

The switch user option is likely disabled in your environment, for security reasons.

1. Have the customer log onto another computer.


2. Let whoever does account management in your organization do their
   job and reset the user's password. It is not a workaround, it the
   simplest solution.


3. Also, the customer probably will not be able to unlock their session,
   and will probably have to restart the computer anyway, so that's
   another way.

As for allowing customers to change their own passwords, they already can. However, you need to ensure that they get ample warning of account expiration. If they have to click past a warning for two weeks to get into their account, they have no one to blame but themselves for the inconvenience of contacting the service desk to get a password reset.

share|improve this answer

answered Aug 26 '16 at 0:24

XalorousXalorous

673215

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Hello Xalorous. While you raise many valid points and this isn't the biggest deal in the world as it will only occur under certain circumstances. As I explained in the post we have fast user switching disabled - this is intentional and has always been set in our domain. What I'm saying is that in Windows 10 the behaviour has changed and wanted to know if this was a new limitation or a bug...
  
  – Ashley H
  Aug 26 '16 at 22:46
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @AshleyH I have not tested this on Windows 7 Enterprise, though I think I recall this happening there. Our folks are still developing our Win 10 for deployment so I can't test it here to duplicate what you see.
  
  – Xalorous
  Aug 30 '16 at 0:34
  

  
  
  
  

add a comment | 

Your Answer

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f798291%2fwindows-10-unable-to-change-domain-password-when-password-has-expired-and-comp%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

0

Might be related to windows update from August which disables falling back to NTLM from Kerberos https://technet.microsoft.com/en-us/library/security/ms16-101.aspx

share|improve this answer

answered Aug 25 '16 at 20:44

Stefan MihajlovicStefan Mihajlovic

114

add a comment | 

0

Might be related to windows update from August which disables falling back to NTLM from Kerberos https://technet.microsoft.com/en-us/library/security/ms16-101.aspx

share|improve this answer

answered Aug 25 '16 at 20:44

Stefan MihajlovicStefan Mihajlovic

114

add a comment | 

Might be related to windows update from August which disables falling back to NTLM from Kerberos https://technet.microsoft.com/en-us/library/security/ms16-101.aspx

share|improve this answer

answered Aug 25 '16 at 20:44

Stefan MihajlovicStefan Mihajlovic

114

share|improve this answer

answered Aug 25 '16 at 20:44

Stefan MihajlovicStefan Mihajlovic

114

answered Aug 25 '16 at 20:44

Stefan MihajlovicStefan Mihajlovic

114

answered Aug 25 '16 at 20:44

Stefan MihajlovicStefan Mihajlovic

114

0

The switch user option is likely disabled in your environment, for security reasons.

1. Have the customer log onto another computer.


2. Let whoever does account management in your organization do their
   job and reset the user's password. It is not a workaround, it the
   simplest solution.


3. Also, the customer probably will not be able to unlock their session,
   and will probably have to restart the computer anyway, so that's
   another way.

As for allowing customers to change their own passwords, they already can. However, you need to ensure that they get ample warning of account expiration. If they have to click past a warning for two weeks to get into their account, they have no one to blame but themselves for the inconvenience of contacting the service desk to get a password reset.

share|improve this answer

answered Aug 26 '16 at 0:24

XalorousXalorous

673215

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Hello Xalorous. While you raise many valid points and this isn't the biggest deal in the world as it will only occur under certain circumstances. As I explained in the post we have fast user switching disabled - this is intentional and has always been set in our domain. What I'm saying is that in Windows 10 the behaviour has changed and wanted to know if this was a new limitation or a bug...
  
  – Ashley H
  Aug 26 '16 at 22:46
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @AshleyH I have not tested this on Windows 7 Enterprise, though I think I recall this happening there. Our folks are still developing our Win 10 for deployment so I can't test it here to duplicate what you see.
  
  – Xalorous
  Aug 30 '16 at 0:34
  

  
  
  
  

add a comment | 

0

The switch user option is likely disabled in your environment, for security reasons.

1. Have the customer log onto another computer.


2. Let whoever does account management in your organization do their
   job and reset the user's password. It is not a workaround, it the
   simplest solution.


3. Also, the customer probably will not be able to unlock their session,
   and will probably have to restart the computer anyway, so that's
   another way.

As for allowing customers to change their own passwords, they already can. However, you need to ensure that they get ample warning of account expiration. If they have to click past a warning for two weeks to get into their account, they have no one to blame but themselves for the inconvenience of contacting the service desk to get a password reset.

share|improve this answer

answered Aug 26 '16 at 0:24

XalorousXalorous

673215

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Hello Xalorous. While you raise many valid points and this isn't the biggest deal in the world as it will only occur under certain circumstances. As I explained in the post we have fast user switching disabled - this is intentional and has always been set in our domain. What I'm saying is that in Windows 10 the behaviour has changed and wanted to know if this was a new limitation or a bug...
  
  – Ashley H
  Aug 26 '16 at 22:46
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @AshleyH I have not tested this on Windows 7 Enterprise, though I think I recall this happening there. Our folks are still developing our Win 10 for deployment so I can't test it here to duplicate what you see.
  
  – Xalorous
  Aug 30 '16 at 0:34
  

  
  
  
  

add a comment | 

The switch user option is likely disabled in your environment, for security reasons.

1. Have the customer log onto another computer.


2. Let whoever does account management in your organization do their
   job and reset the user's password. It is not a workaround, it the
   simplest solution.


3. Also, the customer probably will not be able to unlock their session,
   and will probably have to restart the computer anyway, so that's
   another way.

As for allowing customers to change their own passwords, they already can. However, you need to ensure that they get ample warning of account expiration. If they have to click past a warning for two weeks to get into their account, they have no one to blame but themselves for the inconvenience of contacting the service desk to get a password reset.

share|improve this answer

answered Aug 26 '16 at 0:24

XalorousXalorous

673215

share|improve this answer

answered Aug 26 '16 at 0:24

XalorousXalorous

673215

answered Aug 26 '16 at 0:24

XalorousXalorous

673215

answered Aug 26 '16 at 0:24

XalorousXalorous

673215