I have configured a local webserver with the IISADMPWD virtual
directory so that I can test changing domain passwords over the web. I
set one webpage to use basic authentication, and tried logging onto
that site with a domain account whose password had already expired.
Everything worked as expected, and I got the page stating the password
had expired and needed to be changed. After changing the password, I
was again prompted to enter in my account info, but the webpage would
not accept either the new password or the old password for the account.
I checked the account password on the network by logging onto a
workstation and the password DID change correctly on the network. I
have also tried a few other accounts to make sure the problem was
consistent. Any other type of authentication works fine (ie.
Integrated). I have tried setting a UserTokenTTL on that server,
changing the password from the domain controller, and even deleting
that network account and readding it. It seems as the though that IIS
server is not communicating with the domain controller any more or the
local security database is really hosed. Does anyone have any backend
knowledge of how IIS works that might help me troubleshoot this problem?
>> Stay informed about: IIS 5.0 Baisc Auth - Local Security Database Corrupted?