Hi all, I've a question related to change passwerd in AD. When a user change his password he's able to logon again in the domain with his old password for only 1 time then at the next logon he has to use the new password. Obviusly if he use immediately the new password is able to logon. Is this correct?

Hi have you setup any policy in the AD you can change each user password never expires. you also can change the domain password policy but u need to check did you setup any password policy if not change the password policy to 0. here is link with screen shots http://www.tacktech.com/display.cfm?ttid=354 thanksNaeem Bhatti MCITP EA, MCITP, MCTS Exchange 2007 MCSE security,MCSE AD, MCSE in Messaging, MCDST SBS2003 and SBS2008 Specialist

When a password is changed, the change is made on the DC the person is connected to, and is replicated immediately to the PDC Emulator (the DC in the domain with this role). However, it may take awhile to replicate to all other DC's. When a user authenticates, if the password matches the value saved on the DC that authenticates, the user is allowed in. It's possible the new password has not yet replicated to that DC, so the old password works. However, if the password supplied by the user does not match the value saved on the DC, the DC contacts the PDS Emulator for the latest value. This results in a situation where both the new and old passwords will work for the user for a short time. Richard MuellerMVP ADSI