I unable to reset just one user password within the Windows 2003 active directory domain. All other account can be reset as normal using the Domain Admin account. The error message is"Windows cannot complete the password change for user because:access is denied". I have tried other admin account and direct on the domain controller.

hi what account are u using administrator account or different account. can u define ur qustion little bit more please. thanksNaeem Bhatti MCITP EA, MCITP, MCTS Exchange 2007 MCSE security,MCSE AD, MCSE in Messaging, MCDST SBS2003 and SBS2008 Specialist

Using Adsi Edit check UserAccountControl attribute for the problematic account, possible values description can be found here: http://support.microsoft.com/kb/305144 Using Adsi Edit check security tab for problematic account maybe you do not have permissions to change its passwordWith kind regards Krystian Zieja http://www.projectnenvision.com Follow me on twitter My Blog

Hi, By default, Domain Admins group has full control privileges on normal users. Please follow the steps below to check it. 1. Open Active Directory Users and Computers. On the View menu, make sure Advanced features is checked. 2. Locate the problematic user and right-click it, and then click Properties. 3. In the Properties dialog box, click the Security tab. 4. In the Group or user names list, click Domain Admins. 5. Under Permissions for Domain Admins, make sure the Allow check box for the Full Control permission is checked. Hope it helps. Regards, Bruce