W2K - sync local + domain password

[Loco3KGT]

How does one go about syncing a local account password with a domain account?

I'm not the user of this laptop and don't have the user here to type it. But I need them to be able to log into the local machine when they're not connected to the network and can auth against AD.

Thanks

 

[cleverhandle]

In XP (maybe 2K also, not sure...), the machine will do some kind of caching so that the user can log in even when the domain controller is not available, provided that the user has successfully logged in on that machine at least once. So the simple solution here is not to use a local machine account at all. There's a reg key that sets a limit to the number of logins/attempts possible this way before reconnecting in order to discourage hack attempts on stolen machines. I believe the default is something on the order of 20 successful logins.

 

[spyordie007]

yes 2k does this also; have them log in for the first time while the machine is network connected and than they can leave the network and login with cached credentials.

 

[Loco3KGT]

I don't have this luxury. It is a laptop taken out of the office into the field regularly with no ability to gain access into the domain once outside of the office. Hence the creation of a local account and a domain account.

 

[MulLa]

I don't have this luxury. It is a laptop taken out of the office into the field regularly with no ability to gain access into the domain once outside of the office. Hence the creation of a local account and a domain account.

It doesn't matter. Still create a domain account because cached credentials never expire.