When you change the domain account password by using a 32-bit application on a 64-bit operating system that calls the
NetUserChangePassword API, the password change returns an error message that resembles the following:
1326 ERROR_LOGON_FAILURE
Despite the error, your password is changed in Active Directory Domain Services. However, your logon session and cached credentials are not updated. This situation resembles the following:
- You log on to two computers.
- You change the password on the first computer.
- You remain logged on to the second computer by using the old password.
In this situation, you may experience any of the following issues:
- If you disconnect from the network, you can log on by using the old password only.
- Your access to resources is denied.
- You are prompted to enter your password when you access resources.
- If an Account Lockout policy is active in the domain, the user account is locked out.
This issue persists until you log off the computer on which the password change occurred and then log back on by using the new password.
Additionally, if you apply the update that is documented in
KB 3139921, the error message is no longer received but these symptoms persist.