Microsoft KB Archive/64747

OS/2 LAN Manager: Default ADMIN Account Expires on 09-10-90 ID Number: Q64747

2.00 OS/2

Problem:

After installing OS/2 LAN Manager version 2.00, I’m able to log on using the NET LOGON ADMIN PASSWORD command, but when I try to run a NET ADMIN command, I receive the following error messages:

SYS0005: Access Denied and You have no privileges at \

While the NET ADMIN full-screen interface is running, all options are grayed except for the following:

View->Exit Config->Log off from LAN Accounts->Your Account Accounts->Change your password

Why are these error messages occurring?

Response:

OS/2 LAN Manager version 2.00 is shipped with the following default user-level security settings:

Maximum password age: Valid for [90] days

The ADMIN account is set with the following:

Password last changed : 6-12-90 01:50am Password expires : 9-10-90 01:50am

If OS/2 LAN Manager version 2.00 is not installed prior to September 10, 1990, or the ADMIN default password is not changed before this date, the above “access denied” error message will occur.

To make the default ADMIN account usable again, the password for this account must be changed by using one of the following options:

  Using NET ADMIN, select the following:   Accounts->Change your password.   Enter the old password, followed by the new password. Be sure to remember the new password.   The Administrator options will be grayed until you sign onto ADMIN using the new password.    From an OS/2 command line, do the following:   Enter the following command NET PASSWORD \ ADMIN PASSWORD * where: = The OS/2 LAN Manager machine name assigned to your server.         = The &quot;*&quot; causes the system to prompt for the new password. </li></ul>

= The new password to assign to the ADMIN account. </li>  Type the user’s new password:. </li>  Retype your password to confirm: that the command has completed successfully. </li></ol> </li></ol>

After changing the ADMIN’s password, log off and log on again using the new password (NET LOGON ADMIN ). After this, full administrative privileges will be available to the ADMIN account.

If the workstation’s domain includes an OS/2 LAN Manager master domain controller (running the NETLOGON service) and the default ADMIN account expires, the administrator will be prompted to enter a new password in response to the NET LOGON ADMIN command as follows

Your password for the domain has expired. Please change your password now. Type in your new password: Retype your new password to confirm:

followed by:

Password has been changed, continuing logon process. The server \ successfully logged you on as admin. Your privilege level on this domain is ADMIN.