The PasswordChangeFlags metabase property may be set to 6 in IIS 6 (920723)

In Microsoft Internet Information Services 6, the PasswordChangeFlags metabase property contains values that control password expiration and password change processing between the server and a client. By default, the PasswordChangeFlags metabase property may be set to 6.

This behavior contradicts the following Microsoft TechNet article:

http://technet2.microsoft.com/WindowsServer/f/?en/Library/562c1596-2e04-4002-8af8-86247e008c5c1033.mspx

The article states that the default value is 0.

MORE INFORMATION

To verify the value for the PasswordChangeFlags metabase property, follow these steps:

Click Start, click Run, type cmd, and then click OK.
At the command prompt, type the following command, and then press ENTER:
cd Drive:\inetpub\adminscripts
Note Drive represents the letter of the drive on which IIS is installed.
At the command prompt, type the following command, and then press ENTER:
cscript adsutil.vbs get w3svc\PasswordChangeFlags

The following table lists the possible values for the PasswordChangeFlags property in the IIS metabase.

Value	Setting
0	An SSL connection is required to change passwords
1	An SSL connection is not required to change passwords
2	Password changing is disabled
4	Password expiration notification is disabled
6	Password changing and password expiration notification are disabled

To change the value for the PasswordChangeFlags metabase property, follow these steps:

Click Start, click Run, type cmd, and then click OK.
At the command prompt, type the following command, and then press ENTER:
cd Drive:\inetpub\adminscripts
At the command prompt, type the following command, and then press ENTER:
cscript adsutil.vbs set w3svc\PasswordChangeFlags Value
Note Value represents the value to which you want to change the PasswordChangeFlags property.