Password Expiry on Field Laptops
Hello- Is there a way to have a laptop know when a user's password is about to expire, even when it is not connected to our work network whenever they log in? We have several (Windows 7) laptops used daily in the field. Each user is a member of our AD domain (Server 2008) and must adhere to our password policies. The laptops are only connected to the network overnight when they are in storage, and not while they are actually in use. At the beginning of their shift, users will unplug their power and network cables then head out to their truck. When they arrive at their job location they turn on the computer and log in. They are able to do so since the password is cached. The laptops have nothing on them besides the one program they use for work, i.e. no e-mail, mobile internet connection, etc. Our problem is that the laptop doesn't know that the password will expire soon because the users aren't connected to the network when they log on. Instead, they just receive a "No logon server available" error message when entering their password the for the first time after the expiry period. Is there a way to have the laptop itself know when the password is about to expire? Furthermore, can you customize a message saying something like "Please leave your computer plugged in and change your password before leaving the office during your next shift" or something of the like? Thanks for your help. Kevin
October 20th, 2011 4:08pm

Hello, please see: http://social.technet.microsoft.com/Forums/en/ITCG/thread/c35e7c1e-d5c1-421c-999a-7affeacd1668 http://myitforum.com/cs2/blogs/rcrumbaker/archive/2008/08/15/email-users-when-password-is-about-to-expire.aspxBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
October 20th, 2011 4:50pm

Hi, Of course, we could cache the expiration date, but two problems would occur if we do that. First, and most obvious, it would prevent you from logging on at all. The second problem you would run into is that the administrator may well have changed the expiration date on the account on the domain while you were gone. For the detailed information, please read the following Microsoft TechNet blog: Some Password Policy Settings Are Not Enforced When Disconnected http://blogs.technet.com/b/jesper_johansson/archive/2006/04/21/425991.aspx Regards, Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
October 21st, 2011 9:32pm

Furthermore, can you customize a message saying something like "Please leave your computer plugged in and change your password before leaving the office during your next shift" or something of the like? Maybe you could educate/attach a sticker to advise "Every Monday, power-on and logon, before heading out. If prompted to change your password, do so, before heading out" ?Don
Free Windows Admin Tool Kit Click here and download it now
October 22nd, 2011 1:28am

Hi, Of course, we could cache the expiration date, but two problems would occur if we do that. First, and most obvious, it would prevent you from logging on at all. The second problem you would run into is that the administrator may well have changed the expiration date on the account on the domain while you were gone. For the detailed information, please read the following Microsoft TechNet blog: Some Password Policy Settings Are Not Enforced When Disconnected http://blogs.technet.com/b/jesper_johansson/archive/2006/04/21/425991.aspx Regards, Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
October 22nd, 2011 4:27am

Furthermore, can you customize a message saying something like "Please leave your computer plugged in and change your password before leaving the office during your next shift" or something of the like? Maybe you could educate/attach a sticker to advise "Every Monday, power-on and logon, before heading out. If prompted to change your password, do so, before heading out" ?Don
Free Windows Admin Tool Kit Click here and download it now
October 22nd, 2011 8:23am

Hello, please see: http://social.technet.microsoft.com/Forums/en/ITCG/thread/c35e7c1e-d5c1-421c-999a-7affeacd1668 http://myitforum.com/cs2/blogs/rcrumbaker/archive/2008/08/15/email-users-when-password-is-about-to-expire.aspx Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Thanks for your reply. As I stated, they do not have access to e-mail.
October 26th, 2011 11:20am

Hi, I would like to confirm have you tried all the suggestions above and what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know, and I will be happy to help. Regards, Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
October 31st, 2011 1:55am

Hi, I would like to confirm have you tried all the suggestions above and what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know, and I will be happy to help. Regards, Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. In all fairness, your's wasn't really an answer so I don't know how it was marked as an answer. It was somewhat helpful to read the link I guess. Other suggestions were not helpful because they suggested using email but, as I stated, the users do not have email accounts. The only one I would consider as an answer is Don - tesgroup's. I wish there were a better way than educating them. I've done this and, long story short, they don't always seem to grasp it. No to mention I have to rely on supervisors to pass the word along but they rarely ever do. They plug into the network every night, so I wish there was a way for their computer to know that the password will expire soon even when they're not connected when trying to log on.
November 7th, 2011 1:27pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics