Event ID 2040 Access denied during a password change attempt
The Gatekeeper service account gets an access denied event during a user password change attempt and the password change fails. Event ID 2040 turns up in the Event viewer:
Log Name: Specops
Source: Authentication Gatekeeper (Specops)
Date: 4/14/2023 8:42:49 AM
Event ID: 2040
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: gatekeeper01.domain.local
Description:
User ‘domain\SGkgatekeeper01$’ Failed to change password for user ‘John Smith (jsmith)’ using DC ‘dc1.domain.local’ with error ‘5’ (Access is denied).
Possible solution
Configure it to do the password change differently by using LDAP instead of net user.
To enable it, add the following string to the registry on each Gatekeeper machine:
Location:
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\SpecopsSoft\Authentication\Gatekeeper\Settings
Add a new String:
PasswordChanger = ldap
