Force local password to sync with Domain through VPN?

[CharlieIT]

I have a user that has a laptop. He was in our main office and I connected his laptop to our domain. I made him the administrator of his laptop. He left to go home (across country) and he's been logging into the domain account on his laptop without being connected to the network. He has a VPN connection to our domain configured on his laptop. Last week (while connected through VPN), he was prompted to change his password. He did, and now he has forgotten what he changed it to. So he can no longer log on to his laptop with his domain username and password.

This morning I had him log-in to his laptop as the local administrator and then log-in to VPN using his domain username and password (I reset it for him). Everything works fine, but he wants to be able to login as his domain username and password on his local laptop without being connected to the domain. I thought once he logs in to VPN, the new password for his domain account will update on his laptop. If he tries to log back onto his laptop with his domain username and password (with our domain name in the "logon to" field), he can't.

With the user connected to VPN, is there a way I can force his laptop to update it's locally stored domain password with the password that is now on the domain?

Thank You!

 

[CharlieIT]

I actually found the solution...posting here for posterity:

http://support.microsoft.com/kb/818088

 

[porkchopexpress]

Good of you to post the solution.





When you are the IT director, it's your job to make sure the IT works. If it does work they know already and if it doesn't, they don't want to hear your pathetic excuses.