Some users in my network have this problem. A message appears on logon and asks user to change his password. When it tries, the user has not permission to change it. I suspect those users had not change their password before the "Maximum password age" (in my "Security Settings-->Account Policy-->Password Policy"). When I look in the "security tab" for these users, the "everyone group" is not there. I must add the group manually and check "Change Password". And that, it works; The user can change his password. But I have a lot of users... I need to know in what circonstance that "everyone group" had disappear ! And there is a "script", ablet to scan all my users (in Active Directory Users and Computers) et add the "everyone groupe (with change password only) in security tab? Is it possible??

Hi M1ke020, Thank you for your post. It's a known issue when users were migrated to Windows 2000 AD using ADMT. Please refer to KB258788. I suggest you to post it to script forum: http://social.technet.microsoft.com/Forums/en-US/ITCG/threads If there are more inquiries on this issue, please feel free to let us know. Regards, Rick Tan

Thanks. http://social.technet.microsoft.com/Forums/en-US/ITCG/threads I do it, under "Need script to add "everyone" group to a user (security tab) in AD server 2008".