Windows 7 change password domain controller

This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode. Use Netdom. Please rate your experience Yes No. Any additional feedback? Note After you restart and verify that the password has been successfully reset, you can restart the Kerberos Key Distribution Center KDC service and set its startup type back to Automatic.

This forces the domain controller that has the incorrect computer account password to contact another domain controller for a Kerberos ticket. You may have to disable the Kerberos Key Distribution Center service on all domain controllers except one. If you can, don't disable the domain controller that has the global catalog, unless it is experiencing problems. Browse All Community Hubs. Turn on suggestions. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.

Showing results for. Show only Search instead for. Did you mean:. Sign In. New Contributor. Hello, I have a domain controller with windows server and also i joined many users to this DC and everything is ok expect that domain user cannot change his password by his self through his PC and when he tried to do this this message show to him "Unable to update the password.

Do I change the the setting on the desktops to 14 days? Not defined. Default setting is 14 days. I suppose the desktops local settings are used rather than the Domain controller setting? If I changed the Domain controller setting to any other number, would that change the desktop setting? If I need to change the setting on the desktop, I will have to do this on all Win 7 desktops that I deploy? Yes, policy settings originating from domain Group Policy overwrite any conflicting policy settings found in any Local Group Policy to include administrative, non-administrative, and user specific Local Group Policy.

Thanks for the post! If you change the Domain controller Security Settings, it will apply for every domain-joined computers. A group policy report will be generated, then you can check the security setting on the computer. In additions, for the security reason, please do not include the personal information in your thread, I will delete the email address for you. Because it is not defined, then the setting applied to the desktop is the local setting on the local desktop security settings?

Feedback will be sent to Microsoft: By pressing the submit button, your feedback will be used to improve Microsoft products and services. Privacy policy. This article describes a new registry value that can be used by the administrator to control when the PDC is contacted, which can help reduce communication costs between sites. This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs.

For information about how to back up, restore, and edit the registry, see Windows registry information for advanced users. By default, when a machine account password or user password is changed, or a domain controller receives a client authentication request using an incorrect password, the Windows domain controller acting as the primary domain controller PDC Flexible Single Master Operation FSMO role owner for the Windows domain is contacted.

If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system.