Cisco VPN Active Directory Password Expiration Notification

[baldwintm]

I am using a pair of Cisco ASA 5550's as VPN Concentrators.
They use Active Directory for user Authentication and Authorization. The Connection Profile is set to notify users 14 days prior to password expiration. (Most users will be using Cisco VPN Client 5.0.02 on Windows Vista)

The question is: If a user changes their Active Directory Password, does/can the VPN Client update the locally cached credentials without having to lock/unlock.
OR
Can the user receive some notification that they will have to do something to update that local cache?

 

[North323]

as long as they change it before it expires there will not be an issue. if the password expires, the user will have to use cached creds to get in to pc and then use new creds to auth to vpn

 

[baldwintm]

The problem is that the password can be changed through the Cisco VPN Client.

Will the chached account get updated when the user changes the password through the VPN client, instead of through the operating system?

 

[North323]

yes

 

[baldwintm]

great! thanks!