VPN User Forgot Password, Can't Access AD

[Guest]

We have a SBS 2003 AD Domain. Several of our users work from their
residences and are remote only users. They have a cached AD password for
their login and connect to our network via a Symantec Client VPN.

Every once in a while, one of the users forgets their password. We usually
have the user send their laptop in and connect it up to the network, then
reset their password.

The last time this happen, I had the user login as admin and bring up the
VPN connection for a few hours hoping it would update. It didn't.

Is their any way to delete or reset a cached AD
password without having to ship the laptop to us?

 

[Chris Priede]

Hi,

Is their any way to delete or reset a cached AD
password without having to ship the laptop to us?

Yes. Have the user log on with a local account, make sure the VPN is
connected, then run something (anything, for example Notepad) using "Run
as..." and their domain user account (DOMAIN\user or (e-mail address removed)). That
will update the cached credentials.

 

[Guest]

I tried Map Network Drive Connect using a different user name option thinking
along the same lines. I wonder if it would be diff for Run As?

Thanks!

 

[Chris Priede]

I tried Map Network Drive Connect using a different user name option
thinking along the same lines. I wonder if it would be diff for Run
As?

That _probably_ should have worked, which is bad news.

In case you did either of these -- don't force change on next logon and
don't use a blank password, as both could complicate the situation.
Instead, try simply changing the user's password to a new one you can give
to them over the phone.

 

[Guest]

Using a DOMAIN user account over VPN will not update cached credentials.
Using a LOCAL user account over the VPN will update cached credentials.

I used Map Network Drive\Connect using a different user name along with Run
As on Notepad.It updated the credentials.

Hope this help others.

Thanks to Chris Priede for sharing his time and knowledge!