Keeping your remote users laptop passwords in sync with the domain

[david902]

I work for a government contractor, more than half our employees are out in the field, we're facing a challenge keeping their passwords in sync with the domain.

for the most part, laptops are built in and added to the doamin, in the field the users logon to the domain using cached credentials. Then connect to our VPN to access domain resources.

once the 90 day password change policy triggers a user to change their password all hell breaks loose and they end up using a mix of old passwords to logon their laptop, new passwords to connect to the VPN, they have truoble with mapped drives, email server, never knowing which password to use next.

So whay do you do to keep your remote users laptops and domain passwords in sync. Your help is appreciated. thanks.

 

[N0ktar]

I think you would have to add all of the laptops to the domain and deny users the use of local accounts, than they would only be able to change their password when online with the DC.