Working with cached domain password

myITforum.com Community Forum

Home Forums Blogs Live Support chat Search Articles Wiki FAQ Email Lists Register Login My Profile Inbox Address Book My Subscription My Forums

Photo Gallery Member List Search Calendars FAQ Ticket List Log Out

All Forums RSS Feed Subscription:

Working with cached domain password

View related threads: (in this forum | in all forums)

Logged in as: Guest

Printable Version

All Forums >> [Workstation Support] >> Windows Workstation >> Working with cached domain password

Page: [1]

Message

<< Older Topic Newer Topic >>

Working with cached domain password - 7/3/2008 3:18:12 PM

bkrekeler535

Posts: 8
Score: -4
Joined: 6/23/2008
Status: offline

The problem: A user's password expires when they are traveling. They change their password via a VPN. Now the Windows password and the domain password are no longer sync'd up.

Question: How can we sync up the Windows password with the domain password without having the user come back and log directly into our domain?

This would be a Windows XP SP2 machine. Thanks for your help!

Post #: 1

RE: Working with cached domain password - 7/3/2008 5:41:25 PM

jsandys

Posts: 464
Score: 17
Joined: 3/24/2005
From: San Antonio, TX
Status: offline

Can you please clarify "change their password via a VPN". If they are VPNed in, then they are using their laptop to change their domain password and there is no synch problem. How are they VPNed in? Do you mean RDP?

_____________________________

Jason
________________________________________
http://myitforum.com/cs2/blogs/jsandys/default.aspx

(in reply to bkrekeler535)

Post #: 2

RE: Working with cached domain password - 7/7/2008 7:46:56 AM

ndaniels

Posts: 177
Score: 29
Joined: 2/24/2006
From: The Republic of Elbonia
Status: offline

I've seen similar issues with SSL VPNs which integrate with AD and Outlook Web Access (OWA)--where you can change your domain password through that interface and then the cached credentials on the laptop won't match. The only workaround that I know of is to either (a) give the user a local user account on the laptop to use or (b) have them continue to use their old password to get into the laptop with their own account until the laptop is connected to the domain again.

(in reply to jsandys)

Post #: 3

RE: Working with cached domain password - 7/8/2008 8:05:37 AM

bkrekeler535

Posts: 8
Score: -4
Joined: 6/23/2008
Status: offline

We use SonicWall for our companies VPN. It's set to execute the domain login script when they connect. They are prompted to change their password, which they do, but it only changes their domain password. The windows password is not synched.

Second note: When they login to Windows outside of our domain, they are still logging into their cached domain profile on the system.

(in reply to jsandys)

Post #: 4

RE: Working with cached domain password - 7/8/2008 4:46:31 PM

jsandys

Posts: 464
Score: 17
Joined: 3/24/2005
From: San Antonio, TX
Status: offline

What is prompting them to change their password? Is it part of the login script? Is the VPN authentication tied to Active Directory?

If a system connects to a domain with a user using a cached profile that has an out of date password pressing ctrl-alt-del will force a password synch. Typically, an icon will pop up in the system tray with an information balloon telling the user that their password is out of synch and they must do this.

_____________________________

Jason
________________________________________
http://myitforum.com/cs2/blogs/jsandys/default.aspx

(in reply to bkrekeler535)

Post #: 5