Password Expiry on Field Laptops
Hello-
Is there a way to have a laptop know when a user's password is about to expire, even when it is not connected to our work network whenever they log in?
We have several (Windows 7) laptops used daily in the field. Each user is a member of our AD domain (Server 2008) and must adhere to our password policies. The laptops are only connected to the network overnight when they are in storage, and
not while they are actually in use. At the beginning of their shift, users will unplug their power and network cables then head out to their truck. When they arrive at their job location they turn on the computer and log in. They are able
to do so since the password is cached. The laptops have nothing on them besides the one program they use for work, i.e. no e-mail, mobile internet connection, etc.
Our problem is that the laptop doesn't know that the password will expire soon because the users aren't connected to the network when they log on. Instead, they just receive a "No logon server available" error message when entering their
password the for the first time after the expiry period.
Is there a way to have the laptop itself know when the password is about to expire? Furthermore, can you customize a message saying something like "Please leave your computer plugged in and change your password before leaving the office during your
next shift" or something of the like?
Thanks for your help.
Kevin
October 20th, 2011 4:08pm
Hello,
please see:
http://social.technet.microsoft.com/Forums/en/ITCG/thread/c35e7c1e-d5c1-421c-999a-7affeacd1668
http://myitforum.com/cs2/blogs/rcrumbaker/archive/2008/08/15/email-users-when-password-is-about-to-expire.aspxBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
October 20th, 2011 4:50pm
Hi,
Of course, we could cache the expiration date, but two problems would occur if we do that. First, and most obvious, it would prevent you
from logging on at all. The second problem you would run into is that the administrator may well have changed the expiration date on the account on the domain while you were gone.
For the detailed information, please read the following Microsoft TechNet blog:
Some Password Policy Settings Are Not Enforced When Disconnected
http://blogs.technet.com/b/jesper_johansson/archive/2006/04/21/425991.aspx
Regards,
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
October 21st, 2011 9:32pm
Furthermore, can you customize a message saying something like "Please leave your computer plugged in and change your password before leaving the office during your next shift" or something of the like?
Maybe you could educate/attach a sticker to advise "Every Monday, power-on and logon, before heading out. If prompted to change your password, do so, before heading out" ?Don
Free Windows Admin Tool Kit Click here and download it now
October 22nd, 2011 1:28am
Hi,
Of course, we could cache the expiration date, but two problems would occur if we do that. First, and most obvious, it would prevent you
from logging on at all. The second problem you would run into is that the administrator may well have changed the expiration date on the account on the domain while you were gone.
For the detailed information, please read the following Microsoft TechNet blog:
Some Password Policy Settings Are Not Enforced When Disconnected
http://blogs.technet.com/b/jesper_johansson/archive/2006/04/21/425991.aspx
Regards,
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
October 22nd, 2011 4:27am
Furthermore, can you customize a message saying something like "Please leave your computer plugged in and change your password before leaving the office during your next shift" or something of the like?
Maybe you could educate/attach a sticker to advise "Every Monday, power-on and logon, before heading out. If prompted to change your password, do so, before heading out" ?Don
Free Windows Admin Tool Kit Click here and download it now
October 22nd, 2011 8:23am
Hello,
please see:
http://social.technet.microsoft.com/Forums/en/ITCG/thread/c35e7c1e-d5c1-421c-999a-7affeacd1668
http://myitforum.com/cs2/blogs/rcrumbaker/archive/2008/08/15/email-users-when-password-is-about-to-expire.aspx
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Thanks for your reply. As I stated, they do not have access to e-mail.
October 26th, 2011 11:20am
Hi,
I would like to confirm have you tried all the suggestions above and what is the current situation? If there is anything that I can do for
you, please do not hesitate to let me know, and I will be happy to help.
Regards,
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
October 31st, 2011 1:55am
Hi,
I would like to confirm have you tried all the suggestions above and what is the current situation? If there is anything that I can do for
you, please do not hesitate to let me know, and I will be happy to help.
Regards,
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
In all fairness, your's wasn't really an answer so I don't know how it was marked as an answer. It was somewhat helpful to read the link I guess. Other suggestions were not helpful because they suggested using email but, as I stated, the users
do not have email accounts.
The only one I would consider as an answer is Don - tesgroup's. I wish there were a better way than educating them. I've done this and, long story short, they don't always seem to grasp it. No to mention I have to rely on supervisors to
pass the word along but they rarely ever do.
They plug into the network every night, so I wish there was a way for their computer to know that the password will expire soon even when they're not connected when trying to log on.
November 7th, 2011 1:27pm