Password Reset Enforce History Policy

[jshafton21]

Has any one had issues with the Password Reset Enforce history policy on AD? I keep getting an error "A constraint violation occurred. (Exception from HRESULT: 0x8007202F)Stack Trace:".

I guess I have two questions:
For those of you that have Enforce history policy and aren't having any issues what level of access does your orchestration account have?

And for those of you that did have the issue how did you resolve it?

I have a work around in place, by un-checking the Enforce history policy box the password will be changed but it doesn't enforce the proper history.

Thanks!

[jshafton21]

Hi Mike,

The workflow I edited was the PWD Reset - AD.

Here's the activity that I updated. As you can see I forced the "Force User to Change Password on Login"   to true.

[pranavparmar]

Hi Jared,

We also have similar security requirement and constraint is failing for us. So when you use this option, does user has to really change their password at the time of login or the Change Password Activity in the Password Reset workflow will be counted as "Force Password Change"?

[jshafton21]

The system changing the password does count as the "Forced Password Change" however in our environment we had some timing issues with the way our AD replicates so users were occasionally being asked to change it again the flag wouldn't uncheck which caused issues for users not on the VPN.

To alleviate this if the password change was successful I did another password reset and forced that box to be unchecked.

[pranavparmar]

Thanks Jared. Let me test this out in our environment and see if that works for us or not.

[jchooi]

May I ask  what level of access does your orchestration account have?

Thanks!