Re: How to change password?



No he will not be able to logon with cached credentials unless he knows the
original password or the cached credentials are updated when the computer is
connected to a network that has the domain controller so he can then logon
to the domain with a new domain password. I was suggesting a way that could
still allow him access to the domain through the VPN not being able to logon
with his cached credentials which may be better than no access at all.

Steve


"bowen" <bowen@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0E4F027C-19F1-412B-ABA7-A2F57B5D34AA@xxxxxxxxxxxxxxxx
Thanks for the comments guys. But the thing is, even if the user is able
to
use a local admin account to get into the laptop and is able to connect to
the VPN with the new password, will he then be able to log back into the
laptop using the new password? I was thinking that for his new password to
replicate to his domain logon in his laptop, he should be logged on as
that
user not as a local user? (hopefully I didn't confuse you all...=P)



"Steven L Umbach" wrote:

Since the user can not even logon to his laptop or logon via dialup
connection [if that option shows at logon screen] you would have to give
him
access to the password for a local user account to logon to. Hopefully
that
user account will show the VPN connection as he could then use that to
access the domain over the VPN with the credentials you provide. If the
VPN
connection does not exist for the user account he would need to logon as
a
local administrator to create it. To change cached credentials on a
computer
where the cached credentials are not known the user would need to logon
to
the domain local network with the new password.

Steve


"bowen" <bowen@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:78A2FD8B-E76C-4524-8931-F739A5246B86@xxxxxxxxxxxxxxxx
Hi all,

Have got a remote user (interstate) who had just changed his password
but
had forgotten what his new password was and now could not get into his
laptop. Thing is, the user connects to the network via a VPN client. So
my
dilema is that even if I reset the password on the AD, since he cannot
even
get into his laptop and connect via the VPN client, the stored
credentials
on
his laptop will not get changed. My question is, how the heck can I
change
the password then?

Any ideas?

-Bowen





.



Relevant Pages

  • Re: Cached Credentials causing problems with shares?
    ... The other workaround is to logon locally and map a drive. ... It is almost as if the cached credentials are preventing from getting a kerb ... logon to the machine locally and then connect to the shares over the VPN. ... it sounds like the tickets ...
    (microsoft.public.windows.server.active_directory)
  • Cached credentials.
    ... I have a user unable to logon to his laptop with cached credentials. ... Using XP SP2 on a new Dell ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cannot authenticate remote user to share
    ... Have her try to logon to the domain via vpn using the ... > domain name also which can be configured in the properties of the vpn connectoid. ... If she uses her laptop on the lan. ... but not when using the cached credentials when disconnected. ...
    (microsoft.public.security)
  • Re: Mandatory assignments, "Logon" switch
    ... client until user logs on the client (without cached credentials). ... requesting policy. ... > It is not a problem if users logon using cached credentials but you should ...
    (microsoft.public.sms.swdist)
  • Re: Remote User Needs to Change PWD without connecting to domain
    ... I spent forever setting up our VPN, and I'm pretty sure it's good to go now ... I'm just really curious what happens when her password expires and ... > I think you are misinterpreting the "10 logon" settings. ... > when cached credentials are used to logon locally. ...
    (microsoft.public.win2000.security)