Changing password NT Domain

[JM]

Hello,

We have users working on a NT domain, with NT WorkStation
(for working locally). Every 3 months they're forced to
change their passwords. The same users, have Windows 2000
client notebooks for accessing via VPN to the network (for
home working).

When they change the password with the workstation (NT
Wks), they can access the network (locally) with the new
password, but when they access from their home with the
Windows 2000 Pro client, they can't log with the new
password. They must force a RAS connection to one Windows
NT for change the password another time.

Any idea? Are passwords cached in Windows 2000 Pro?

Thank you in advanced

 

[Rakesh Chanana [MSFT]]

While on LAN, have them reboot the client machines after changing
passwords. NT does cache user passwords but that cache is not getting
updated after the password change. My guess is that the users are changing
passwords on the network but then they shut down the PC without waiting
long enough for the local cache to be updated.
----
Thanks,
Rakesh Chanana [MSFT]

When replying, please post to GROUP so that everyone can benefit from the
knowledge.

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm


--------------------

 

[JM]

Thank you Rakesh for your answer,

But the problem isn't with the LAN workstations. They
change the password while connected to the network, they
log into the network some many times, but the problem is
when they try to connect to the network remotely (using
InfoPista from British Telecom) with the notebooks and
Windows 200 Pro. It seems that the new password is not
changed, and they can't use the new password for logging
into the network. They must use another connection type:
RAS connection to a NT DC, and change the password another
time. After this second change, they can log with the
InfoPista connection normally (and while they're on the
network).

Why Win2000 clients can't log remotely the first time the
password is changed? It is possible that Win2000 passes
directly the las known password, without prompting if the
password has changed?

Thanks another time.

JM

-----Original Message-----
While on LAN, have them reboot the client machines after changing
passwords. NT does cache user passwords but that cache is not getting
updated after the password change. My guess is that the users are changing
passwords on the network but then they shut down the PC without waiting
long enough for the local cache to be updated.
----
Thanks,
Rakesh Chanana [MSFT]

When replying, please post to GROUP so that everyone can benefit from the
knowledge.

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm