| Previous | Next |
| STATUS_CSS_RESETS_EXHAUSTED | STATUS_LOST_MODE_LOGON_RESTRICTION |
STATUS_PASSWORD_CHANGE_REQUIRED
The credential is accepted only for password-change workflow
This status can appear when account or device policy marks the current password as requiring replacement. It differs from an expired password only in the policy path that raised it; normal resource access should not proceed until an authorized password-change exchange completes.
The application must support the provider’s password-change flow. Repeating the original operation with the same credential will not clear the state. In managed-device scenarios, ensure the device can reach the authoritative account provider and receive current policy.
What to inspect
- Query the account state and password-last-set information from the authoritative provider.
- Confirm that the client supports an interactive password-change or recovery flow.
- After the change, refresh cached credentials and retry only once the provider reports success.
References
- Microsoft Open Specifications: SAM password change pattern
- Microsoft Open Specifications: SAM password policy
- Microsoft: net user
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.