If you receive:
Unable to change password on this account (C00000BE) and
. The client is on a Windows NT 4.0 SP3 Workstation
. The validating domain controller is running Windows NT 4.0 SP4
. The client workstation has RestrictAnonymous set ( see bottom of tip 519)
. The client password has expired or the admin has set User Must Change Password at Next Logon
. Undo RestrictAnonymous
. Upgrade the client to SP4.