Solved

Active Directory users can access with the old password !!!!

Posted on 2012-12-31
5
637 Views
Last Modified: 2013-01-12
Hello all,

We have many application and third party integrated with active directory but i face the following issue with all application also with Exchange 2010 SP2,

when i reset password for particular user he can access his account  with the old password for 2-5 minutes only  with integrated applications but domain logon works fine , is that a normal behavior, can we handle it , thanks all.
0
Comment
Question by:Bahloul
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 2

Expert Comment

by:thomasclm
ID: 38732136
If you have multiple domain controllers then it takes some time to replicate to other domain controllers.  So the authentication might be happening from a Domain Controller before its replicated from the domain controller where the password change happened.

Regards,
Thomas
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 38732154
0
 
LVL 3

Author Comment

by:Bahloul
ID: 38732776
Dear  thomasclm

i thought that then i shut down the additional domain controller but it's still later i discovered that it's a normal behavior from the A.D for 1 hour then it will expired, si still i need to reduce it as possible,

thanks .
0
 
LVL 3

Author Comment

by:Bahloul
ID: 38732822
Dear PeteLong

it's very helpful article but still i missing understand this key values :

On the Edit menu, click Add Value, and then add the following registry value:
Value Name: UserTokenTTL (Note This is case-sensitive!)
Data Type: REG_DWORD
Value Range: 0 - 0x7FFFFFFF (Note This unit is in seconds.)

how many seconds it will takes ?

also i need to make this with all integrated applications not Exchange only ,
0
 
LVL 4

Accepted Solution

by:
palicos earned 500 total points
ID: 38736152
Is there any configuration where you can modify or configure how long password should be cached or do you have any apps which syncs the password,

if yes, how often...??

 How is the replication configured or is there any issue with the replication between the DC's. The issue can be due to replication also.

You can disable the cache logon see this
http://technet.microsoft.com/en-us/library/cc755473(v=ws.10).aspx

Cached and Stored Credentials Technical Overview
http://technet.microsoft.com/en-us/library/hh994565(v=ws.10).aspx
http://support.microsoft.com/kb/913485?wa=wsignin1.0
0

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question