

UPDATE MAC MAIL EXCHANGE PASSWORD MANUAL
So even if a password is changed via some external method (OWA, remote desktop, a manual reset by me) the OS X machine will not have the changed password. Any ideas how I can get around this Update: I removed my account, reset password and added account again. When I enter it, it is not accepted even though the password is correct. I know I could have users VPN in and Remote Desktop to another machine to change their passwords, but this will play havoc with the local machines keychain, as well as sudo privileges, which might just get worse the next time they visit the office.Įdit: I should clarify that one of the issues seems to be that even with an active vpn connection, OS X doesn't seem to try and communicate/authenticate against the AD servers (just keeps using cached credentials), even when a password change has been attempted. Mail App keeps asking for Exchange password. If a Mac VPN's in and tries to change their password, they just get the "password was not changed" message ("your system administrator may not allow you to change your password or there was some other problem with your password.").Īnyone know why, or have a solution for this?

UPDATE MAC MAIL EXCHANGE PASSWORD WINDOWS
The Windows users can VPN in, hit Ctrl-Alt-Del, change their password and everything is updated and fine. The problem is the actual password change. I've found several ways for users to be notified of an expiring password (scripts+email, adpassmon, etc).

The problem comes for the handful of office users who are permanently remote. They come in to the office, get the expiration notice, and change their password at login or via the usual change password options for Win7 or OS X. File-> Account Settings-> Account Settings. To set the option Always prompt for logon credentials: Tools-> Account Settings. When the expiration date comes up, it's not a problem for most users. Click Next and then Finish to confirm the change. Every users domain login is used to log in to their laptops as well as a few corporate resources, including Cisco VPN connection when away from the office. Everybody in the company has a laptop that is joined to the domain, a mix of Win7 and Macbook Pro's (Mountain Lion or Lion). We've got a a number of security policies that we enforce, including a 180 day password expiration policy. In our office, we are running some Windows servers running an Active Directory domain.
