I work at a state college, and we have a problem with student machines, account lockouts and printing. Student computers are not bound to Active Directory. However, they can connect to our print server and map a printer using their Active Directory username and password. If the student chooses not to save their username and password when they connect, the printers stay offline after a reboot until they connect to the print server manually by running \\printers or similar. This is quite the headache to have to remember, and print jobs will just sit in the queue in offline mode if you forget. To remedy this, we recommend that students check the "Remember my credentials" box when they first connect to the print server. This stores their domain credentials in the Credential Manager and works great, until they change their password. When the student changes their password in Active Directory, the Credential Manager is not updated, and repeatedly tries the stale credentials, which locks out the student's account in Active Directory. No prompt ever comes up telling the student their password is bad, and Credential Manager just keeps trying the bad password until it is manually edited or removed. Is there any way to get Credential Manager to prompt again for the password when it fails? Or is there any way to get the mapped printer to connect again instead of just staying offline when credentials are not stored? Please let me know if you need any further information.

I think your best bet is to teach the students to manually edit and change their credentials in credential manager, or at best, don't have their passwords expire unless you are in a high-security environment. Or bind them to Active Directory.