Hello,

I currently have several laptops that are joined to a domain, but are rarely connected to the internal network. The users log in using their cached domain credentials. In the current condition, whenever a user's cached credentials expire, they're unable to log on to their computer (unless they bring their laptops in and connect to the internal network). We currently have a VPN setup, but the client doesn't work fully with Windows 7, and doesn't allow for connection to the VPN before logging on to Windows. Connecting after logging in to Windows works fine however. If I have the users connect to the VPN client before their credentials expire, and they change their passwords by using the Ctrl+Alt+Del option, will that change be replicated back to the DC?

Hello,

I currently have several laptops that are joined to a domain, but are rarely connected to the internal network. The users log in using their cached domain credentials. In the current condition, whenever a user's cached credentials expire, they're unable to log on to their computer (unless they bring their laptops in and connect to the internal network). We currently have a VPN setup, but the client doesn't work fully with Windows 7, and doesn't allow for connection to the VPN before logging on to Windows. Connecting after logging in to Windows works fine however. If I have the users connect to the VPN client before their credentials expire, and they change their passwords by using the Ctrl+Alt+Del option, will that change be replicated back to the DC?

Please see that: http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/87e84872-c321-4b8c-b13d-0d60a003c3d3

I case of any logon failures, you can try that: http://www.bvainc.com/blog/2010/10/fix-cached-credentials-over-vpn/

The solution from http://www.bvainc.com/blog/2010/10/fix-cached-credentials-over-vpn/ worked like a charm.