Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have accounts whith only OWA access, because they are generic accounts and we do not want the accounts to be used as machine logins. We have a password policy that users must change their passwords every 6 months.

The problem we are having is that since the accounts are not loging into the machines, when the password policy kicks in it is preventing users with OWA only access from changing their password. Also, when we select "User must change the password at next logon" it also causes the same issue.

We have two exchange servers the main one and a front end one. what we have been doing with these generic account is in properties, under the "account" tab we restricted "log on to" to the front end server.

Just to clarify, when we have no restrictions, users can change their passwords via the web without any issues. It is only when we force them to only login via OWA that they cant change passwords.

I tried adding our domain controler and main exchange server to the "This user can log on to The following computers" in the account tab, but still it is not allowing them to change passwords.

Currently I have to manually reset the passwords for OWA only accounts. Is there anyway to allow OWA acconts to change passwords?

EDIT: Users restricted to only OWA can change their password via the web browser without any issues when there are no restrictions. In other words normally they can just log into outlook via the web and change their password, but when the password policy expires or we force them to change their password at next login, they are unable to.

share|improve this question
Are the users able to change their passwords in OWA when they have not expired? – Sam Feb 1 '10 at 17:47

This is the link that Werewolf was talking about.

It looks like the dll was included in Server 03 SP1, but you have to manually register the dll and make some other changes. You might want to look into that.

share|improve this answer
Yes, but are 2003 server is patched all the way up to SP2, does it still apply? – radioactive21 Feb 1 '10 at 22:55
Honestly I don't know, since the kb doesn't specify. I've run into the same issue with one of my Exchange servers at a previous job, but didn't have enough users that it was a big deal. I just set the password manually. It couldn't hurt to try registering the dll. Just make sure you back everything up before you make the changes. – Holocryptic Feb 2 '10 at 15:40

Take a look at this Microsoft Article.

Part of the way down, it also asks about a fix:

For Windows 2003 (All versions of Exchange) 833734 ( ) FIX: You experience various problems when you use the Password Change pages in IIS 6.0

It looks like there are a few registry entries to modify.


share|improve this answer
I can be wrong, but we do have this up since web access only users can change their passwords anytime. It is only when the password policy force them or we force them to change the password that they cant. Hope this helps to clarify. – radioactive21 Feb 1 '10 at 19:50
I think you are wrong. I think KB297121 is a more comprehensive change than what you did before. Basically, there's no simple change for you to make to make this work. Instead of allowing password changes through OWA, you need to provide another option. KB297121 is one option. In other environments, I've seen the development group write a password changer themselves. All a matter of preference. – icky3000 Feb 1 '10 at 20:39

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.