Cannot Change Domain Password By Using RAS in Windows 2000

When you dial into a Windows 2000 RAS server and your domain password has expired, the change password process that is used by RAS may not work, and your client computer may not be able to connect. The problem occurs when the RAS server is a member of a Microsoft Windows NT 4.0 domain or mixed-mode domain.

This problem may occur if the change-password requests are directed to a backup domain controller. Change-password requests in a Windows NT 4.0 domain must be directed to the primary domain controller.

To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

To work around this issue, make the RAS server use the primary domain controller for authentication.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 3.

For more information about how to create an LMHOSTS file, please view chapter 19 of the Microsoft Windows NT Resource Guide, Volume 1.