Users cannot change their own password - affecting 2 out of 3 domains

hi,

on 1 of 3 domains in out forest users unable change password if forced @ first logon or when passwords expiring or expired.  error saying not have permission change password.

initially though might down lack of a password policy on domain.  set following on default domain policy:

enforce password history: 3 passwords remembered
maximum password age: 42 days
minimum password age: 0 days
minimum password length: 7 characters
password must meet complexity requirements: enabled
store passwords using reversible encryption: disabled

this didn't fix problem.

the domain child domain, running w2k8 sp2, forest , domain functional levels windows server 2008.  clients windows xp sp3.

ideas might causing this?

cheers

adam.

are sure domain controller holding pdc emulator fsmo role accessible these users?

if not cause of problem.

 

---

posting provided "as is" no warranties or guarantees , , confers no rights.

Windows Server  >  Directory Services