Password cannot be changed in a Windows Server 2003 SP2 domain

Symptoms

Consider the following scenario:
  • You have a computer that is running in Windows 8.1, Windows Server 2012 R2, Windows 8, Windows Server 2012, Windows 7 or Windows Server 2008 R2 in a Windows Server 2003 Service Pack 2 (SP2) domain.
  • The "user must change password at next logon" check box of a domain user is enabled.
  • The user tries to change the password from the domain client.
In this scenario, the password cannot be changed. Specifically, after you enter the new password, no error message pops up and the dialog box appears again as the password is still expired.

Cause

This issue occurs because the Windows Server 2003 domain controller handles a specific flag incorrectly. The flag is introduced on the client-side to resolve an issue in which the kerberos.dll file is not updating user's credential cache if the user logs in with user principal name (UPN).

Resolution

Update information

How to obtain this update

Windows Update
This update is available from Windows Update.
Microsoft Download Center
The following files are available for download from the Microsoft Download Center:
Operating systemUpdate
All supported x86-based versions of Windows Server 2003Download Download the package now.
All supported x64-based versions of Windows Server 2003Download Download the package now.
All supported IA-64-based versions of Windows Server 2003Download Download the package now.
For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites

To apply this update, you must be running Windows Server 2003 SP2.

For more information about how to obtain a Windows Server 2003 service pack, click the following article number to view the article in the Microsoft Knowledge Base:
889100 How to obtain the latest service pack for Windows Server 2003

Registry information

To apply this update, you do not have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this update.

Update replacement information

This update does not replace a previously released update.
File information

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates
Properties

Article ID: 2927811 - Last Review: 24 Jun 2014 - Revision: 1

Feedback