Page 2 of 2 <12
Topic Options
#104881 - 2003-09-19 11:21 PM Re: Changing Cached Domain Account Password
Chris S. Offline
MM club member
*****

Registered: 2002-03-18
Posts: 2368
Loc: Earth
Also, not sure what client you're using, but you may want to try to establish your tunnel before the users login. See the post from Howard from the other day on this using the Cisco client.
Top
#104882 - 2003-09-19 11:22 PM Re: Changing Cached Domain Account Password
MaestroG Offline
Fresh Scripter

Registered: 2002-12-30
Posts: 28
Loc: Tulsa, OK
Yeah...I can't do that because the VPN Client that is distributed to these remote users doesn't integrate with the MSGina so you have to logon first and then run the program.
Top
#104883 - 2003-09-19 11:26 PM Re: Changing Cached Domain Account Password
Chris S. Offline
MM club member
*****

Registered: 2002-03-18
Posts: 2368
Loc: Earth
Neither does Cisco, I believe, but it sounds as though you aren't running it anyway.

Here's the link: http://www.kixtart.org/board/ultimatebb.php?ubb=get_topic;f=14;t=001109

Top
#104884 - 2003-09-19 11:39 PM Re: Changing Cached Domain Account Password
MaestroG Offline
Fresh Scripter

Registered: 2002-12-30
Posts: 28
Loc: Tulsa, OK
We are using the Cisco client, but version 3.3.6 which doesn't do the pre-logon tunnel. We now are testing a new version 4.? that fixes all our woes because it integrates with the MSGina (CTRL-ALT-DEL screen) allowing the tunnel to be established prior to the login.

Until it passes internal quality control testing and is pushed out to existing users, I seem to be stuck. We've had a layoff and management is requiring all remote users to change their password who are now set to never expire...and so here we are at my delima. How to get that cached password sync'd. [Frown]

G

Top
#104885 - 2003-09-20 12:42 AM Re: Changing Cached Domain Account Password
Chris S. Offline
MM club member
*****

Registered: 2002-03-18
Posts: 2368
Loc: Earth
quote:

...management is requiring all remote users to change their password who are now set to never expire...

Now you see why their passwords were set to never expire in the first place, I imagine. Yeah, you're stuck until you upgrade the client or your network (to AD).

I'd suggest to management that you hold off on the policy until the new client is approved. If they ask why point them to the 520 or so posts about this issue on Google and Microsoft's unwillingness to fix the issue with a patch or other workaround.

http://groups.google.com/groups?q=vpn+cached+password&ie=UTF-8&oe=UTF-8&hl=en&btnG=Google+Search

Top
#104886 - 2003-09-20 12:57 AM Re: Changing Cached Domain Account Password
Howard Bullock Offline
KiX Supporter
*****

Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
Yes MS should provide a way to update the locally cached password, but it is not that difficult to do this.

This is what we tell our remote users and they don't seem to have any problem following the instructions.

quote:
Correct procedure to change password (every 90 days):
Logon to Win2K
Connect via Cable/DSL or Vdial /VPN
If prompted for a password going into Outlook - CANCEL!
Press CTRL-ALT-DEL and click on [CHANGE PASSWORD] button
This will allow you to change both the AMP11 network and the Win2000 machine login at the same time....

Do you use Exchange? If not, you may have to change the text.
_________________________
Home page: http://www.kixhelp.com/hb/

Top
Page 2 of 2 <12


Moderator:  Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 1003 anonymous users online.
Newest Members
StuTheCoder, M_Moore, BeeEm, min_seow, Audio
17884 Registered Users

Generated in 0.055 seconds in which 0.026 seconds were spent on a total of 13 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org