Microsoft KB Archive/303443

= BUG: PasswordFilter Function Called Twice on Domain Controller =

Article ID: 303443

Article Last Modified on 8/1/2005

-

APPLIES TO

 Microsoft Win32 Application Programming Interface, when used with:  Microsoft Windows 2000 Service Pack 1

 Microsoft Windows 2000 Service Pack 2 

-



This article was previously published under Q303443



SYMPTOMS
If a user's password is reset through the Reset Password option on the pop-up menu in the Active Directory Users and Computers administrative tool on a Windows 2000 Domain Controller, the PasswordFilter function implemented in a password filter DLL will be called twice if the new password matches any of the old passwords in the password history.



STATUS
Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.



MORE INFORMATION
The Reset Password option should not enforce the password history policy. Password history policy enforcement should be done only for password changes in which the user changes his or her own password. Additionally, the PasswordFilter implemented in a password filter DLL should be called only once.

Keywords: kbbug kbkernbase kbsecurity KB303443

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.