I'm seeing a strange problem with the ADFS updatepassword page. We're batch-creating users, and they are trying to change their passwords. However, roughly 50% of the accounts can't change their password, the following event is logged:
Password change failed for following user:
Additional Data
User: DOMAIN\username
Device Certificate:
Server on which password change was attempted: ad01.ad.domain Error details: NewPasswordHistConflict
The error would indicate that the password is the same as the previous, but we've tested several different passwords, and still get the same error. I can't find anything special common between the accounts that have problems and those who don't.
The users are created with this Powershell line:
New-ADUser -Name $displayName -DisplayName $displayName -SamAccountName $accountName`
-GivenName $FirstName -Surname $LastName -EmailAddress $Email -Path $oupath`
-UserPrincipalName "[email protected]" -AccountPassword $securePassword `
-Enabled $true
Any ideas? The domain controllers and ADFS is Windows 2012R2.