If you have problem with password change delay on workstation, please check if you have installed HP Protect Tools. Usually this software is installed on workstations or laptops from HP.
So my situation:
2 domain controllers
workstations are in domain
a lot of GPO
mail GPO (on top) with password rights.
Network, everything is fine
Domain, replication is fine, no issues (critical)
On servers or workstation where HP protect tools is not installed everything is fine, no delays, etc.
When you have this application installed delay 3 min.
Now how to remove this software:
1. Log as administrator to workstation (may be domain admin or local admin)
2. Install CCLeaner (installation package you will find by Google ) – when you will try to uninstall HP Protect Tools, you will see message that you need to unistall first:
2.1 HP ProtectTools Device Access Manager
2.2 File Sanitizer For HP Protect Tools
2.3 Privacy Manager for HP ProtectTools
2.4 Theft Recovery
but in classic window uninstaller you will not see this. Thats why we need ccleaner.
3. To uninstall HP Protect Tools you need before uninstall:
3.1 HP ProtectTools Device Access Manager
3.2 File Sanitizer For HP Protect Tools
3.3 Privacy Manager for HP ProtectTools
3.4 Theft Recovery
When you will try to uninstall HP ProtectTools Security Manager. You will receive message that you need uninstall Drive Encryption for HP ProtectTools. Go back to unistaller and delete it.
Now you may uninstall HP ProtectTools Security Manager.
Time to do 55 min. Now is another problem, how to do this quickly.
That what we need delay less that 15 sec.