When I log onto Windows it asks me to change my password, but then says Access Denied. To fix this and stop it saying Access Denied on change password:
- Open AD Users and Computers (Admin Pak / Remote Server Administration Tools)
- Find the user account of the user who gets access denied when changing their password
- Untick User cannot change password
This basically happens because the user doesn’t have permission to change their password, yet the security policy mandates that their password expires every X days.