If a user tries to connect to a Microsoft Windows Small Business Server (SBS) 2003-based computer by using the Remote Web Workplace feature, the user receives the following error message:
The user name or password is incorrect. Verify that CAPS LOCK is not on, and then retype the current user name and password. If you receive this message again, contact your system administrator to ensure that you have the correct permissions to use the Remote Web Workplace.
This symptom occurs if the following conditions are true:
When the user tries to connect, the user receives a prompt to change their password.
The user types the correct original password, types the new password, and then clicks OK.
This problem occurs if the following conditions are true:
The user's account has the "User must change password at next logon" feature enabled.
The NetBIOS domain name does not match the left side of the DNS domain name. For example, the DNS domain name is "example.local" and the NetBIOS domain name is not "example."
Note This problem also may occur if the user is not a member of the Remote Web Workplace Users group. Before you follow the steps in the "Workaround" section, verify that the user is a member of this group.
To work around this problem, do not try to connect to your SBS 2003-based computer by using the Remote Web Workplace feature after you enable the "User must change password at next logon" feature. Instead, use Microsoft Outlook Web Access (OWA) to change the password. To do this, follow these steps:
Create the IISADMPWD virtual directory. To do this, follow these steps:
Start the IIS Microsoft Management Console (MMC) snap-in. To do this, click Start, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
Right-click the Web site where you want to create the virtual directory, point to New, and then click Virtual Directory.
In the Virtual Directory Creation Wizard, click Next, type IISADMPWD in the Alias box, and then click Next.
In the Path box, type drive where Windows is installed:\windows\system32\inetsrv\iisadmpwd, and then click Next.
Click to select the following check boxes if they are not already selected:
Run scripts (such as ASP)
Click Next, and then click Finish.
Set the PasswordChangeFlags value to 0 (zero). To do this, follow these steps:
Click Start, click Run, type cmd in the Open box, and then click OK.
Change to the Inetpub\Adminscripts folder.
Type adsutil.vbs, and then press ENTER.
Note If this is the first time that you have run Adsutil.vbs, you may receive a "This script does not work with WScript" message. Click OK, click Yes to register CScript as the default host for VBScript, and then click OK when you receive the message that states that CScript was registered successfully. Run the Adsutil.vbs command again. Instead of registering CScript, you can prepend cscript to any adsutil.vbs command. For example, cscript adsutil.vbs set w3svc/1/PasswordChangeFlags [value].
Type cscript adsutil.vbs set w3svc/1/passwordchangeflags 0, and then press ENTER.
Change the Application Pool setting of the IISADMPWD virtual directory to ExchangeApplicationPool. To do this, follow these steps:
Start the IIS MMC snap-in. To do this, click Start, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
Right-click the IISADMPWD virtual directory.
On the Virtual Directory tab, click ExchangeApplicationPool in the Application Pool list, and then click OK.
Download and install the hotfix that is described in the following Microsoft Knowledge Base article: