Prompt to Change Passwords When Logging on to an Active Directory Namespace

When logging on to IBM® Cognos® components using a Microsoft Active Directory namespace, the submitted password is recognized as expired and you are prompted to change it. This occurs even if the password should still be valid. If the password is successfully changed, the behavior still occurs.

The following error message appears:

Your password has expired. Please change it.

Please type your credentials for authentication.

The solution is to set up the authority for delegated administration for IBM Cognos components. Ensure that the server name or named account for starting the IBM Cognos service is set up in the Active Directory properties as an authority for delegated administration. Without these permissions, IBM Cognos components are unable to read all user properties from the Active Directory server.

For more information, see the Active Directory documentation.