The 'User Must Change Password at Next Logon' flag is checked when an Assistant Admin resets user ac (NETIQKB28765)

  • 7728765
  • 02-Feb-2007
  • 19-Jun-2007

Resolution

fact
Directory and Resource Administrator 6.60

fact
Directory and Resource Administrator 7.x

symptom
The 'User Must Change Password at Next Logon' flag is checked when an Assistant Admin resets user account passwords.

symptom
MMC incorrectly display the 'User Must Change Password at Next Logon' flag.

symptom
The 'User Must Change Password at Next Logon' flag displays but the setting does not take effect. 

symptom
The password is reset correctly but the flag is actually not checked even though it displays as being checked.

cause
This is a display problem.  An Assistant Admin with the 'Reset Password - Modify a User Account' and 'View user account properties' powers should be able to view all user account properties and only be able to reset the password of a user account.  The Assistant Admin should not be able to modify the user account flags, such as 'User Must Change Password at Next Logon'. 

When the Assistant Admin resets the password of a user he or she is able to view the 'User Must Change Password at Next Logon' flag, but is not able to modify this property since he or she does not have the power to modify the property.  But, as soon as the Assistant Admin resets the password the flag is displayed as being checked, which is misleading because the flag does not actually get checked.



fix

This issue is resolved in Directory and Resource Administrator (DRA) version 7.5 and later.



Additional Information

Formerly known as NETIQKB28765