Hello, I'm managing a large number of remote WinXP laptop users that sign on to a domain profile. These users can connect via VPN to the domain and have the ability to change their user account passwords via OWA if needed. When on the local LAN these folks can easily change their domain password and the cached credentials on the computer are also updated to reflect the new password change however I am unsure as to how this can be efficiently managed for remote users as it seems that although they can change their password in AD, there doesn't seem to be any means to update the cached password on the laptop unless they log directly into the domain from the login prompt. With the remote VPN solution this is not an easy option without instructing users to maintain two separate passwords (one current, one cached). Does anyone out there have a solution to this? I'd like to enforce a password policy but this one little detail tends to make it more complicated than it should be. Thanks in advance, ~Pete

Pete,What kind of VPN client do you use. some clients like the Cisco VPN client allow to establish a VPN connection first before logging in.Johan

We've got the option of both MS and Cisco VPN both of which would work if logging on via dial-up using the VPN connection. This might be the only option at this time although I was hoping that there was a less user-involved method that didn't require having to hold the end-users hand through the process.

Pete, Yes this is the only option. Johan

Pete,The remote user establishes a VPN connection, CTRL+Alt+Delete to change password. Then, with VPN connection established, CTRL+Alt+Delete, click Lock Computer. CTRL+Alt+Delete, unlock the computer with the new password. The computers cached credentials will now be updated with the new password.Chad