AD - Force password change through to laptop

I changed the password on my son's account using Active Directory for Users and Computers (dsa.msc).  Yet when he logs in on his laptop with no Ethernet connection to the domain controller (Windows Server 2003), the laptop is happy with the old cached password.  Is there a way to force the password change to all workstations in the domain?
jdanaAsked:
Who is Participating?
 
Vishal PatelCommented:
You can disable cache password in gpo. So, each time it will require to connect to AD for login credential authentication. For that open a GPO and navigate to
Computer configuration > Windows Settings > Security Settings > Account Policy > Passowrd Policy

Set "Enforce password remember" to 0.


0
 
Mike KlineCommented:
Can he connect to the domain and then enter the new password?  That will cause the new password to be stored.
0
 
chukuCommented:
While vjpatel provide a solution it is not practical
I do not think there is a real solution as you don't want to limit a laptop to work only in one location, attached to the home domain. You didn't mention why you want to force the change but I believe setting a reminder 'your pad expired' starting 14 days prior to the date (30? 60? Days) would make him hang it while working without interruption
0
 
jdanaAuthor Commented:
Thanks!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.