Solved

AD - Force password change through to laptop

Posted on 2011-03-13
4
962 Views
Last Modified: 2012-05-11
I changed the password on my son's account using Active Directory for Users and Computers (dsa.msc).  Yet when he logs in on his laptop with no Ethernet connection to the domain controller (Windows Server 2003), the laptop is happy with the old cached password.  Is there a way to force the password change to all workstations in the domain?
0
Comment
Question by:jdana
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 35124734
Can he connect to the domain and then enter the new password?  That will cause the new password to be stored.
0
 
LVL 4

Accepted Solution

by:
Vishal Patel earned 125 total points
ID: 35125071
You can disable cache password in gpo. So, each time it will require to connect to AD for login credential authentication. For that open a GPO and navigate to
Computer configuration > Windows Settings > Security Settings > Account Policy > Passowrd Policy

Set "Enforce password remember" to 0.


0
 
LVL 17

Assisted Solution

by:chuku
chuku earned 125 total points
ID: 35125326
While vjpatel provide a solution it is not practical
I do not think there is a real solution as you don't want to limit a laptop to work only in one location, attached to the home domain. You didn't mention why you want to force the change but I believe setting a reminder 'your pad expired' starting 14 days prior to the date (30? 60? Days) would make him hang it while working without interruption
0
 

Author Closing Comment

by:jdana
ID: 35188777
Thanks!
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question