CAM-AAA-0064 The function 'IADsUser::ChangePassword' failed

[Rahul Ganguli]

Hello All,

I have recently examined one system which has Cognos server on Windows 2012 and Active directory server on Windows 2012.

The users are prompted to reset their passwords at logon but all changes fail with
CAM-AAA-0064 The function 'IADsUser::ChangePassword' failed.
If the user is not required to change password the logon works and everything is fine.

I did some more analysis and interestingly the password change was working till mid of June.

Does anyone have ever encountered this issue?
Could this be a Windows bug?

I saw one more person having the same issue with similar environment, https://www.ibm.com/developerworks/community/forums/html/topic?id=7287321f-8713-41a3-b075-02bd76e1baee&ps=25

Any help is appreciated.

Regards,
Rahul

[Rahul Ganguli]

Hello All,

It is an windows update issue.

https://support.microsoft.com/en-us/kb/3178465

Please remove these updates from AD server and Cognos BI server and you will see the things working again.

Regards,
Rahul

[tmathew81]

I have removed patch MS16-101 that includes this KB3167679 on the BI servers (was not installed on the domain controllers), but the problem persists. Any thoughts on this?