This can happen if the "Everyone" or "Authenticated Users" Group does not have the "Access this computer from the network" rights on an authenticating domain controller. In addition, this issue can also come up if the "Everyone" Group is has not been granted the "change password" right in the user's OU.
Dig Deeper on Windows client management
Related Q&A from Bernie Klinder
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.