What can be done when getting error in password change logs Changing password for domain user: False for Domain Account of Windows

What can be done when getting error in password change logs "Changing password for domain user: False" for Domain Account of Windows

Issue: What can be done when getting error in password change logs "Changing password for domain user: False" for Domain Account of Windows



Resolution: You get this error when 'ARCOS WinPWD' service installed on AD server for Password Change doesn't have privileges to change the password of Domain User.

Connect to AD server and provide Log On to ARCOS WinPWD Service using Domain Admin ID (Domain ID which has privilege of changing password of all users). The issue should be resolved. 




P.S: If you want to test that the Domain Admin user which is used as a Log On for ARCOS WinPWD service has rights to change password, kindly follow below steps,

Step 1: Launch 'cmd' on AD server and "run it as a different" user using same ID as used in Log On.
Step 2: Execute following command, 
net user <username> / domain <password> 

Where,
<username> is the User Id of which password needs to be changes through ARCON PAM.
<password> is any Random/Sample Password (According to the Password Policy).
(If the above command executes successfully that means Log On user has privileges to change password. And note that the Random/Sample Password set in the command will be the password set for the user)