New user can use any password to login.

So we have an issue that is sporadic. When a user is created in AD, under the self service web portal they can use any password to login. They also can not change the password because the old password doesn't match since it seems it's not reading it at all. This isn't an AD issue because if the user logs into a domain computer they are forced to change their password and it works successfully.

The work around is we have to set the user's account to not force a password change in AD. Then we change the user's password, again making sure that the force password change at next logon isn't checked. Then the user can login and successfully change their password when they get a change.

Anyone else having a similar issue. Again it's not everyone it's sporadic and only on new users.

Thanks.