Windows 10 - Unable to change domain password when password has expired and computer is locked ...
What is the meaning of Triage in Cybersec world?
When should I buy a clipper card after flying to OAK?
How to type this arrow in math mode?
Looking for Correct Greek Translation for Heraclitus
Return to UK after having been refused entry years ago
What is the most effective way of iterating a std::vector and why?
Have you ever entered Singapore using a different passport or name?
How come people say “Would of”?
For what reasons would an animal species NOT cross a *horizontal* land bridge?
Is a "Democratic" Oligarchy-Style System Possible?
Should I use my personal e-mail address, or my workplace one, when registering to external websites for work purposes?
What does Linus Torvalds mean when he says that Git "never ever" tracks a file?
Does coating your armor in silver add any effects?
Can we generate random numbers using irrational numbers like π and e?
Can one be advised by a professor who is very far away?
If I score a critical hit on an 18 or higher, what are my chances of getting a critical hit if I roll 3d20?
What does ひと匙 mean in this manga and has it been used colloquially?
Can you compress metal and what would be the consequences?
Delete all lines which don't have n characters before delimiter
Landlord wants to switch my lease to a "Land contract" to "get back at the city"
Reference request: Oldest number theory books with (unsolved) exercises?
Why do we hear so much about the Trump administration deciding to impose and then remove tariffs?
What is the closest word meaning "respect for time / mindful"
Why isn't airport relocation done gradually?
Windows 10 - Unable to change domain password when password has expired and computer is locked
The 2019 Stack Overflow Developer Survey Results Are InAdd-AppxPackage : 0x80073CF6, … could not be registered. Merge Failure : error 0x80070003 :Joining AD domain with Windows 10 using smart cardWLAN profile GPO settings and saved user credentialsWindows 10 Connect to Disconnected user session without password as Domain AdminWindows Server User denied write access when explicitly given rightsHow to enable PIN login for domain-joined Windows 10 Pro via Group Policy“App can’t be opened using the Built-in Administrator account. Sign in with a different account and try again” - even with UAC enabledOutlook 2010 automatic profile setup not working on Windows 10 ProInstaller file not launching with Administrative privileges in Windows 10RDP-related GPOs are not applying
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}
We have recently migrated over to Windows 10 Pro Version 1511. Prior to that we were on Windows 7 Pro.
We have fast user switching disabled for all computers by group policy in our domain. It is quite common that users don't change their password even though they are given password expiration notice.
On Windows 7 clients when a domain users account password had expired after they had logged in and the computer gets locked (for lunch or they were idle) they came back to login and they were able to change the password as they had a switch user option as shown below.
However, in Windows 10 when the same situation happens we get the following prompt:
"Your password has expired. To set a new password, select OK, select Switch user, re-enter your current password, then follow the prompts on the screen.
So we click ok and now there is no longer a switch user option?
Has anyone come across this yet? Wonder if this is a bug in Windows 10 or a limitation of some kind?
windows-10
edited Aug 22 '16 at 13:34
techraf
3,35181735
asked Aug 22 '16 at 10:31
Ashley HAshley H
612
bumped to the homepage by Community♦ 7 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
We have recently migrated over to Windows 10 Pro Version 1511. Prior to that we were on Windows 7 Pro.
We have fast user switching disabled for all computers by group policy in our domain. It is quite common that users don't change their password even though they are given password expiration notice.
On Windows 7 clients when a domain users account password had expired after they had logged in and the computer gets locked (for lunch or they were idle) they came back to login and they were able to change the password as they had a switch user option as shown below.
However, in Windows 10 when the same situation happens we get the following prompt:
"Your password has expired. To set a new password, select OK, select Switch user, re-enter your current password, then follow the prompts on the screen.
So we click ok and now there is no longer a switch user option?
Has anyone come across this yet? Wonder if this is a bug in Windows 10 or a limitation of some kind?
windows-10
edited Aug 22 '16 at 13:34
techraf
3,35181735
asked Aug 22 '16 at 10:31
Ashley HAshley H
612
bumped to the homepage by Community♦ 7 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
Is there an "Other user" option from the login screen (bottom left-hand)? Is there a reason someone cannot just reset the AD password for the user (on a DC) requiring a change on login?
– user987654321
Aug 22 '16 at 14:30
No "other user" on the bottom left hand side I'm afraid. Yes that could be done but I'd consider that a workaround and am looking for a fix so end users can change their own password.
– Ashley H
Aug 22 '16 at 14:54
add a comment |
We have recently migrated over to Windows 10 Pro Version 1511. Prior to that we were on Windows 7 Pro.
We have fast user switching disabled for all computers by group policy in our domain. It is quite common that users don't change their password even though they are given password expiration notice.
On Windows 7 clients when a domain users account password had expired after they had logged in and the computer gets locked (for lunch or they were idle) they came back to login and they were able to change the password as they had a switch user option as shown below.
However, in Windows 10 when the same situation happens we get the following prompt:
"Your password has expired. To set a new password, select OK, select Switch user, re-enter your current password, then follow the prompts on the screen.
So we click ok and now there is no longer a switch user option?
Has anyone come across this yet? Wonder if this is a bug in Windows 10 or a limitation of some kind?
windows-10
edited Aug 22 '16 at 13:34
techraf
3,35181735
asked Aug 22 '16 at 10:31
Ashley HAshley H
612
We have recently migrated over to Windows 10 Pro Version 1511. Prior to that we were on Windows 7 Pro.
We have fast user switching disabled for all computers by group policy in our domain. It is quite common that users don't change their password even though they are given password expiration notice.
On Windows 7 clients when a domain users account password had expired after they had logged in and the computer gets locked (for lunch or they were idle) they came back to login and they were able to change the password as they had a switch user option as shown below.
However, in Windows 10 when the same situation happens we get the following prompt:
"Your password has expired. To set a new password, select OK, select Switch user, re-enter your current password, then follow the prompts on the screen.
So we click ok and now there is no longer a switch user option?
Has anyone come across this yet? Wonder if this is a bug in Windows 10 or a limitation of some kind?
windows-10
windows-10
edited Aug 22 '16 at 13:34
techraf
3,35181735
asked Aug 22 '16 at 10:31
Ashley HAshley H
612
edited Aug 22 '16 at 13:34
techraf
3,35181735
asked Aug 22 '16 at 10:31
Ashley HAshley H
612
edited Aug 22 '16 at 13:34
techraf
3,35181735
edited Aug 22 '16 at 13:34
techraf
3,35181735
edited Aug 22 '16 at 13:34
techraf
3,35181735
3,35181735
asked Aug 22 '16 at 10:31
Ashley HAshley H
612
asked Aug 22 '16 at 10:31
Ashley HAshley H
612
asked Aug 22 '16 at 10:31
Ashley HAshley H
612
612
bumped to the homepage by Community♦ 7 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
bumped to the homepage by Community♦ 7 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
Is there an "Other user" option from the login screen (bottom left-hand)? Is there a reason someone cannot just reset the AD password for the user (on a DC) requiring a change on login?
– user987654321
Aug 22 '16 at 14:30
No "other user" on the bottom left hand side I'm afraid. Yes that could be done but I'd consider that a workaround and am looking for a fix so end users can change their own password.
– Ashley H
Aug 22 '16 at 14:54
add a comment |
Is there an "Other user" option from the login screen (bottom left-hand)? Is there a reason someone cannot just reset the AD password for the user (on a DC) requiring a change on login?
– user987654321
Aug 22 '16 at 14:30
No "other user" on the bottom left hand side I'm afraid. Yes that could be done but I'd consider that a workaround and am looking for a fix so end users can change their own password.
– Ashley H
Aug 22 '16 at 14:54
Is there an "Other user" option from the login screen (bottom left-hand)? Is there a reason someone cannot just reset the AD password for the user (on a DC) requiring a change on login?
– user987654321
Aug 22 '16 at 14:30
Is there an "Other user" option from the login screen (bottom left-hand)? Is there a reason someone cannot just reset the AD password for the user (on a DC) requiring a change on login?
– user987654321
Aug 22 '16 at 14:30
No "other user" on the bottom left hand side I'm afraid. Yes that could be done but I'd consider that a workaround and am looking for a fix so end users can change their own password.
– Ashley H
Aug 22 '16 at 14:54
No "other user" on the bottom left hand side I'm afraid. Yes that could be done but I'd consider that a workaround and am looking for a fix so end users can change their own password.
– Ashley H
Aug 22 '16 at 14:54
add a comment |
2 Answers
2
active
oldest
votes
Might be related to windows update from August which disables falling back to NTLM from Kerberos https://technet.microsoft.com/en-us/library/security/ms16-101.aspx
answered Aug 25 '16 at 20:44
Stefan MihajlovicStefan Mihajlovic
114
add a comment |
The switch user option is likely disabled in your environment, for security reasons.
- Have the customer log onto another computer.
- Let whoever does account management in your organization do their
job and reset the user's password. It is not a workaround, it the
simplest solution. - Also, the customer probably will not be able to unlock their session,
and will probably have to restart the computer anyway, so that's
another way.
As for allowing customers to change their own passwords, they already can. However, you need to ensure that they get ample warning of account expiration. If they have to click past a warning for two weeks to get into their account, they have no one to blame but themselves for the inconvenience of contacting the service desk to get a password reset.
answered Aug 26 '16 at 0:24
XalorousXalorous
673215
Hello Xalorous. While you raise many valid points and this isn't the biggest deal in the world as it will only occur under certain circumstances. As I explained in the post we have fast user switching disabled - this is intentional and has always been set in our domain. What I'm saying is that in Windows 10 the behaviour has changed and wanted to know if this was a new limitation or a bug...
– Ashley H
Aug 26 '16 at 22:46
@AshleyH I have not tested this on Windows 7 Enterprise, though I think I recall this happening there. Our folks are still developing our Win 10 for deployment so I can't test it here to duplicate what you see.
– Xalorous
Aug 30 '16 at 0:34
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f798291%2fwindows-10-unable-to-change-domain-password-when-password-has-expired-and-comp%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
Might be related to windows update from August which disables falling back to NTLM from Kerberos https://technet.microsoft.com/en-us/library/security/ms16-101.aspx
answered Aug 25 '16 at 20:44
Stefan MihajlovicStefan Mihajlovic
114
add a comment |
Might be related to windows update from August which disables falling back to NTLM from Kerberos https://technet.microsoft.com/en-us/library/security/ms16-101.aspx
answered Aug 25 '16 at 20:44
Stefan MihajlovicStefan Mihajlovic
114
add a comment |
Might be related to windows update from August which disables falling back to NTLM from Kerberos https://technet.microsoft.com/en-us/library/security/ms16-101.aspx
answered Aug 25 '16 at 20:44
Stefan MihajlovicStefan Mihajlovic
114
Might be related to windows update from August which disables falling back to NTLM from Kerberos https://technet.microsoft.com/en-us/library/security/ms16-101.aspx
answered Aug 25 '16 at 20:44
Stefan MihajlovicStefan Mihajlovic
114
answered Aug 25 '16 at 20:44
Stefan MihajlovicStefan Mihajlovic
114
answered Aug 25 '16 at 20:44
Stefan MihajlovicStefan Mihajlovic
114
answered Aug 25 '16 at 20:44
Stefan MihajlovicStefan Mihajlovic
114
114
add a comment |
add a comment |
The switch user option is likely disabled in your environment, for security reasons.
- Have the customer log onto another computer.
- Let whoever does account management in your organization do their
job and reset the user's password. It is not a workaround, it the
simplest solution. - Also, the customer probably will not be able to unlock their session,
and will probably have to restart the computer anyway, so that's
another way.
As for allowing customers to change their own passwords, they already can. However, you need to ensure that they get ample warning of account expiration. If they have to click past a warning for two weeks to get into their account, they have no one to blame but themselves for the inconvenience of contacting the service desk to get a password reset.
answered Aug 26 '16 at 0:24
XalorousXalorous
673215
Hello Xalorous. While you raise many valid points and this isn't the biggest deal in the world as it will only occur under certain circumstances. As I explained in the post we have fast user switching disabled - this is intentional and has always been set in our domain. What I'm saying is that in Windows 10 the behaviour has changed and wanted to know if this was a new limitation or a bug...
– Ashley H
Aug 26 '16 at 22:46
@AshleyH I have not tested this on Windows 7 Enterprise, though I think I recall this happening there. Our folks are still developing our Win 10 for deployment so I can't test it here to duplicate what you see.
– Xalorous
Aug 30 '16 at 0:34
add a comment |
The switch user option is likely disabled in your environment, for security reasons.
- Have the customer log onto another computer.
- Let whoever does account management in your organization do their
job and reset the user's password. It is not a workaround, it the
simplest solution. - Also, the customer probably will not be able to unlock their session,
and will probably have to restart the computer anyway, so that's
another way.
As for allowing customers to change their own passwords, they already can. However, you need to ensure that they get ample warning of account expiration. If they have to click past a warning for two weeks to get into their account, they have no one to blame but themselves for the inconvenience of contacting the service desk to get a password reset.
answered Aug 26 '16 at 0:24
XalorousXalorous
673215
Hello Xalorous. While you raise many valid points and this isn't the biggest deal in the world as it will only occur under certain circumstances. As I explained in the post we have fast user switching disabled - this is intentional and has always been set in our domain. What I'm saying is that in Windows 10 the behaviour has changed and wanted to know if this was a new limitation or a bug...
– Ashley H
Aug 26 '16 at 22:46
@AshleyH I have not tested this on Windows 7 Enterprise, though I think I recall this happening there. Our folks are still developing our Win 10 for deployment so I can't test it here to duplicate what you see.
– Xalorous
Aug 30 '16 at 0:34
add a comment |
The switch user option is likely disabled in your environment, for security reasons.
- Have the customer log onto another computer.
- Let whoever does account management in your organization do their
job and reset the user's password. It is not a workaround, it the
simplest solution. - Also, the customer probably will not be able to unlock their session,
and will probably have to restart the computer anyway, so that's
another way.
As for allowing customers to change their own passwords, they already can. However, you need to ensure that they get ample warning of account expiration. If they have to click past a warning for two weeks to get into their account, they have no one to blame but themselves for the inconvenience of contacting the service desk to get a password reset.
answered Aug 26 '16 at 0:24
XalorousXalorous
673215
The switch user option is likely disabled in your environment, for security reasons.
- Have the customer log onto another computer.
- Let whoever does account management in your organization do their
job and reset the user's password. It is not a workaround, it the
simplest solution. - Also, the customer probably will not be able to unlock their session,
and will probably have to restart the computer anyway, so that's
another way.
As for allowing customers to change their own passwords, they already can. However, you need to ensure that they get ample warning of account expiration. If they have to click past a warning for two weeks to get into their account, they have no one to blame but themselves for the inconvenience of contacting the service desk to get a password reset.
answered Aug 26 '16 at 0:24
XalorousXalorous
673215
answered Aug 26 '16 at 0:24
XalorousXalorous
673215
answered Aug 26 '16 at 0:24
XalorousXalorous
673215
answered Aug 26 '16 at 0:24
XalorousXalorous
673215
673215
Hello Xalorous. While you raise many valid points and this isn't the biggest deal in the world as it will only occur under certain circumstances. As I explained in the post we have fast user switching disabled - this is intentional and has always been set in our domain. What I'm saying is that in Windows 10 the behaviour has changed and wanted to know if this was a new limitation or a bug...
– Ashley H
Aug 26 '16 at 22:46
@AshleyH I have not tested this on Windows 7 Enterprise, though I think I recall this happening there. Our folks are still developing our Win 10 for deployment so I can't test it here to duplicate what you see.
– Xalorous
Aug 30 '16 at 0:34
add a comment |
Hello Xalorous. While you raise many valid points and this isn't the biggest deal in the world as it will only occur under certain circumstances. As I explained in the post we have fast user switching disabled - this is intentional and has always been set in our domain. What I'm saying is that in Windows 10 the behaviour has changed and wanted to know if this was a new limitation or a bug...
– Ashley H
Aug 26 '16 at 22:46
@AshleyH I have not tested this on Windows 7 Enterprise, though I think I recall this happening there. Our folks are still developing our Win 10 for deployment so I can't test it here to duplicate what you see.
– Xalorous
Aug 30 '16 at 0:34
Hello Xalorous. While you raise many valid points and this isn't the biggest deal in the world as it will only occur under certain circumstances. As I explained in the post we have fast user switching disabled - this is intentional and has always been set in our domain. What I'm saying is that in Windows 10 the behaviour has changed and wanted to know if this was a new limitation or a bug...
– Ashley H
Aug 26 '16 at 22:46
Hello Xalorous. While you raise many valid points and this isn't the biggest deal in the world as it will only occur under certain circumstances. As I explained in the post we have fast user switching disabled - this is intentional and has always been set in our domain. What I'm saying is that in Windows 10 the behaviour has changed and wanted to know if this was a new limitation or a bug...
– Ashley H
Aug 26 '16 at 22:46
@AshleyH I have not tested this on Windows 7 Enterprise, though I think I recall this happening there. Our folks are still developing our Win 10 for deployment so I can't test it here to duplicate what you see.
– Xalorous
Aug 30 '16 at 0:34
@AshleyH I have not tested this on Windows 7 Enterprise, though I think I recall this happening there. Our folks are still developing our Win 10 for deployment so I can't test it here to duplicate what you see.
– Xalorous
Aug 30 '16 at 0:34
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f798291%2fwindows-10-unable-to-change-domain-password-when-password-has-expired-and-comp%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Is there an "Other user" option from the login screen (bottom left-hand)? Is there a reason someone cannot just reset the AD password for the user (on a DC) requiring a change on login?
– user987654321
Aug 22 '16 at 14:30
No "other user" on the bottom left hand side I'm afraid. Yes that could be done but I'd consider that a workaround and am looking for a fix so end users can change their own password.
– Ashley H
Aug 22 '16 at 14:54