Error: 0x8ad when attempting to change the NetWare and NDS password

(Last modified: 30Dec2002)

This document (10057645) is provided subject to the disclaimer at the end of this document.

fact

Novell Client 4.8 for Windows NT/2000

Novell Client 4.71 for Windows NT/2000

Novell Client 4.7 for Windows NT/2000

symptom

Error: 0x8ad when attempting to change the NetWare and NDS password

Member servers are showing up under the Ctrl-Alt-Del option for Change Password. For a Domain environment it is possible to access files/resources on the Member Server without a "real" account in the Member Server local SAM database (using Domain User account). If the Member Server is highlighted inside the Change Password dialog when there is no local Member Server user account it will generate the following error when the user tries to change the password:

"The attempt to change the password failed. The error code was 0x8ad"

cause

Duplication Steps:
1. Get a user account for access to a NT Domain.
2. Make sure there is a Member/Stand-alone NT Server that is also a member of the Domain.
3. Create an NT Share on the Member NT Server that a Domain Group (such as Domain Users) has ATS (Access Through Share) permissions to.
4. Login from an NT Workstation with the 4.71 or 4.8 NT Client to the Domain.
5. Map a drive to the Member server (make sure the Member Server does not have a local user account with the same name as the Domain user otherwise the problem does not occur).
6. Use the Ctrl-Alt-Del Screen to try to "Change Password".

You will see the Member Server listed and highlighted by default. Attempting to change the password will generate the following error:

"The attempt to change the password failed. The error code was 0x8ad"

fix

This issue has been resolved in a NOVNPNT.DLL file dated 02/27/2001 or later. It was fixed in the Novell Client for Windows NT/2000 version 4.8.

The new NOVNPNT.DLL includes two new logic checks during the function that builds the resource list:

1. Do not list Member Servers that are members of the Domain the user is already authenticated to (only includes the domain the user's RID belongs to, not any "trusted" domains).

2. Do not list Member Servers if they do not have a local SAM database entry for the authenticated NT User. This check is only made after the first check, so it will only be executed if the Member Server is also not a member of the Domain the NT User is authenticated to. This check was designed to eliminate (not list) Member Servers reached via a trust relationship (since we only want to list NT Servers where we can change the user's password on).

These new checks should now only list the Domain the NT User is authenticated to and any NT Member Servers that are not a member of the same Domain as the user and where the NT Member Server has a local SAM account for the NT User. Since the 0x8ad error only happened when trying to change the user's password against NT Member Servers that did not have a local SAM account for the NT User, the conditions that cause this problem should be eliminated with the patched NOVNPNT.DLL.

It will also be included in the 4.81 client when it releases the first week of October 2001

document

Document Title:	Error: 0x8ad when attempting to change the NetWare and NDS password
Document ID:	10057645
Solution ID:	NOVL29322
Creation Date:	13Oct2000
Modified Date:	30Dec2002
Novell Product Class:	NetWare

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.