bkrekeler535 -> Working with cached domain password (7/3/2008 3:18:12 PM)
The problem: A user's password expires when they are traveling. They change their password via a VPN. Now the Windows password and the domain password are no longer sync'd up.
Question: How can we sync up the Windows password with the domain password without having the user come back and log directly into our domain?
This would be a Windows XP SP2 machine. Thanks for your help!
jsandys -> RE: Working with cached domain password (7/3/2008 5:41:25 PM)
Can you please clarify "change their password via a VPN". If they are VPNed in, then they are using their laptop to change their domain password and there is no synch problem. How are they VPNed in? Do you mean RDP?
ndaniels -> RE: Working with cached domain password (7/7/2008 7:46:56 AM)
I've seen similar issues with SSL VPNs which integrate with AD and Outlook Web Access (OWA)--where you can change your domain password through that interface and then the cached credentials on the laptop won't match. The only workaround that I know of is to either (a) give the user a local user account on the laptop to use or (b) have them continue to use their old password to get into the laptop with their own account until the laptop is connected to the domain again.
bkrekeler535 -> RE: Working with cached domain password (7/8/2008 8:05:37 AM)
We use SonicWall for our companies VPN. It's set to execute the domain login script when they connect. They are prompted to change their password, which they do, but it only changes their domain password. The windows password is not synched.
Second note: When they login to Windows outside of our domain, they are still logging into their cached domain profile on the system.
jsandys -> RE: Working with cached domain password (7/8/2008 4:46:31 PM)
What is prompting them to change their password? Is it part of the login script? Is the VPN authentication tied to Active Directory?
If a system connects to a domain with a user using a cached profile that has an out of date password pressing ctrl-alt-del will force a password synch. Typically, an icon will pop up in the system tray with an information balloon telling the user that their password is out of synch and they must do this.