Microsoft KB Archive/260981

= Cannot Change an Expired Domain Password When You Access a Web Server =

Article ID: 260981

Article Last Modified on 11/21/2006

-

APPLIES TO


 * Microsoft Internet Information Server 4.0
 * Microsoft Internet Information Services 5.0

-



This article was previously published under Q260981



We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx



SYMPTOMS
When a user with an expired Windows NT password tries to access a Web page on a server that requires authentication, the browser is redirected to a password change dialog box. Under special circumstances, the password change process fails and the following error message occurs:

Cannot find Server

The page cannot be displayed



CAUSE
The browser tries to open an SSL connection to the Web server to transfer the username and password. By design, the SSL connection is enforced, because the Windows NT account information would otherwise be exposed during the transfer to the server. If the Web server does not allow SSL connections because no certificate is installed, then the error message occurs.



RESOLUTION
Install a certificate on the Web site to enable SSL connections.

