Syncing Active Directory password with Windows on a remote machine

[DeaconZ_]

I have remote users who use our IVE with SAM. When they change their password on the IVE page, it updates in AD, but it doesn't sync with their laptop.

Any thoughts on making this happen with SAM?

(Network Connect is not an option on this)

[Mrkool_]

tcp 135 is the net logon port if you forward this traffic from your client via a SAM to the internal network so that it can talk to the DC this should solve this issue i think.

[DeaconZ_]

I thought that too, but no luck there. I even opened up the AD servers to all ports and still no joy.

I had the users lock their computers while logged in to the vpn and it doesn't work either. If this doesn't work I'm really in a pickle.

[moreilly_]

Hi Wayne,

I«m not 100% sure, but I think you get the new credentials to the client pc only, if this pc logs-in to the Domain, otherwise the client still uses the cached credentials.

Greetings

Moreilly

[Mrkool_]

well after they have logged into juniper and enabled SAM try pressing ctrl+alt+del and than lock the computer and than unlock using the new password

[DeaconZ_]

---

@mrkool wrote:
well after they have logged into juniper and enabled SAM try pressing ctrl+alt+del and than lock the computer and than unlock using the new password

---

Yeah...that doesn't work either.

[DeaconZ_]

---

@moreilly wrote:

Hi Wayne,

I«m not 100% sure, but I think you get the new credentials to the client pc only, if this pc logs-in to the Domain, otherwise the client still uses the cached credentials.

Greetings

Moreilly

---

If you use Network Connect it will update them after the user is logged in.You can use the lock/unlock method like MrKool said. For some reason though SAM doesn't like it.