NimbostratusTry doing a packet capture while you are attempting the password change operation. I seem to recall was a very old defect where password changes failed when UDP 464 was blocked, and 11.5.1 is quite old. So perhaps this is the cause of the problem.
In any case, a packet capture should reveal the problem easily. Filter on port 464 (kpasswd), 88 (krb), and 53 (dns).
NimbostratusMy mistake. It actually does work using a pool. The issue was due to a group policy not allowing a password to be changed again within a 24 hour period. Just so happened both the accounts we tried from already had the password changed that day. Sorry for the confusion. thanks!
