Forum Discussion
Slawek82
Apr 04, 2022Copper Contributor
Password Change Logon Loop Windows serwer 2019 KB5011551
I have a problem users passwords expire or I manual reset them with "User must change password" box checked. Every time they enter a new password it tells them to do it again in an endless loop. All...
MysticFoxDE
Apr 19, 2022Brass Contributor
Hi Slawek82,
try to set the "Minimum Password Age" to 0 days.
I had the same problem with Server 2022 and was able to fix it by setting the "Minimum password age" to "0 days".
You can usually find the setting in the "Default Domain Policy", where it is set to "1 day" by default.
Best Regards from Germany
Alex
try to set the "Minimum Password Age" to 0 days.
I had the same problem with Server 2022 and was able to fix it by setting the "Minimum password age" to "0 days".
You can usually find the setting in the "Default Domain Policy", where it is set to "1 day" by default.
Best Regards from Germany
Alex
Slawek82
Apr 19, 2022Copper Contributor
Hi MysticFoxDE
In my case, this solution did not help.
However, Micorsoft fixed the problem by issuing an update (KB5012647)
I did an update to 4 DC and everything is back to normal.
Thank you
Regards from PL
Slawek
In my case, this solution did not help.
However, Micorsoft fixed the problem by issuing an update (KB5012647)
I did an update to 4 DC and everything is back to normal.
Thank you
Regards from PL
Slawek
- MysticFoxDEApr 19, 2022Brass Contributor
Hi Slawek,
the current April patch did not help me with the 2022 DC, because even an hour after installing the patch and of course also rebooting the clients and the server, a normal user was still unable to change a password.
It only worked again after I adjusted the "Minimum password age" in the GPO.
This Microsoft botch is getting worse by the day. 😡
Best Regards from Germany
Alex
P.S. Pernille-Eskebo Quality Assurance
Are you testing anything at all or are you perhaps still in hibernation mode?- Daniel PeterssonApr 20, 2022Copper Contributor
Hi MysticFoxDE,
I have brand new DC's with WS 2022 and am now experiencing the exact same issue as you. I've tried to apply the workaround you supplied with the GPO setting "Minimum password age" set to 0 (zero), unfortunately without any positive result.
Do you have any tips?
Greetings from Sweden!
//Daniel
- MysticFoxDEApr 21, 2022Brass ContributorHi Daniel,
one small addition.
I had problems with Kerberos on the 2022, which I was able to mitigate somewhat by setting the registry key described in the following article.
https://support.microsoft.com/en-us/topic/kb5008380-authentication-updates-cve-2021-42287-9dafac11-e0d0-4cb8-959a-143bd0201041
PacRequestorEnforcement is currently set to 1 for me, but I've also experimented with 0 and 2 in the meantime.
Best Regards from Germany
Alex