Restituisci
-
Titolo
Authentication fails if account in Active Directory has checkbox 'User must change password at next logon' set -
Descrizione
Users attempting to authenticate using Defender receive one of these error messages:
"Invalid Windows password. Enter a valid Windows password."
"Your Windows password has expired and access has been forbidden. Please contact your system administrator."
-
Causa
The account in Active Directory has checkbox 'User must change password at next logon' set.
This clears the value of the pwdLastSet attribute in Active Directory which causes Defender to deny the authentication attempt. -
Risoluzione
WORKAROUND
Reset the user's password but do not use the checkbox 'User must change password at next logon'.Once the use has authenticated with the temporary password the user should then change the password manually using the Ctrl+Alt+Del password change option.
STATUS
Waiting for fix in a future release of Defender.
-
Richiesta di modifica
224706