Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

If a user has locked his desktop, and asks for reset password. If mustchangepassword is enabled, the user cannot unlock his computer. This is the error message he gets: 'Your password has expired. Please change your password at another machine and retry or contact your domain administrator'

Any way to work around this?


My apologies for not framing the question in a clearer manner.

The issue is that I am remotely reseting passwords for users. When resetting the password, I want to make them change it the next time they login. To make them change password, I set attribute 'pwdLastSet' to zero.

For a user who locked his desktop(part of a domain), this approach leads to error I mentioned earlier: 'Your password has expired. Please change your password at another machine and retry or contact your domain administrator'

It is working well for a user who is logging in afresh.

share|improve this question

migrated from stackoverflow.com Sep 5 '11 at 0:46

This question came from our site for professional and enthusiast programmers.

closed as not a real question by Jason Berg, RobM, jscott, sam, Shane Madden Sep 5 '11 at 22:05

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

1  
belongs on serverfault. –  Daniel A. White Sep 5 '11 at 0:37
4  
Is there any reason why the quoted instructions can't be followed? –  John Gardeniers Sep 5 '11 at 1:15
    
add comment

2 Answers

Please clarify: Is the user unable to use another PC?

You could: Get the domain admin to reset the password, wait a few minutes for the change to propigate to the PC then unlock the PC. If that doesn't work, logon to the locked PC with an admin account and either: change the password using the User Manager or reboot the PC. Upon reboot use the new password that the admin created at the server or at the PC.

share|improve this answer
add comment

Go to another machine on the domain, log in, change password, log off. Wait two minutes. Log into locked machine.

If it's an emergency, shut down the laptop, on restart, change password. Run chkdsk on system drive at next reboot, since you probably shouldn't have forced a shutdown on the system in the first place.

...that's really all there is to it. Log in to another workstation for a few minutes. Or don't reset the user's password while they're logged in, or train users to change their passwords when the "your password will expire in X days" starts showing up.

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.