

InterviewSolution
Saved Bookmarks
1. |
Solve : Logging onto Domain with old and new password? |
Answer» <html><body><p>This is weird and I was wondering if anyone <a href="https://interviewquestions.tuteehub.com/tag/might-560522" style="font-weight:bold;" target="_blank" title="Click to know more about MIGHT">MIGHT</a> know what the cause of this is?<br/><br/>A users password was changed to a new password for the domain user account. The users were able to use the <a href="https://interviewquestions.tuteehub.com/tag/old-585313" style="font-weight:bold;" target="_blank" title="Click to know more about OLD">OLD</a> domain password even though a new domain password was created at this site. For a period of time both the old and new passwords were allowing authentication to log onto this Windows XP Pro SP2 workstation.<br/><br/>We only have single domain controllers at each location, so there is no possibility that a redundant authenticator was present.<br/><br/>Our Domain Controllers at each site are running Windows <a href="https://interviewquestions.tuteehub.com/tag/server-11236" style="font-weight:bold;" target="_blank" title="Click to know more about SERVER">SERVER</a> 2003.<br/><br/>**** Did the workstation cache the authentication process for both new and old passwords to work or what may have caused this???<br/><br/>I did verify that the users were <a href="https://interviewquestions.tuteehub.com/tag/logging-2798746" style="font-weight:bold;" target="_blank" title="Click to know more about LOGGING">LOGGING</a> into the domain and not local domain workgroup against a local account. They were logging into the coop domain for our coop food store.<br/><br/>This workstation is clean of any malware/virus's as well....<br/><br/> The short answer is the workstation did cache the old password. When you logged in with the new password the machine was forced to check the <a href="https://interviewquestions.tuteehub.com/tag/dc-430940" style="font-weight:bold;" target="_blank" title="Click to know more about DC">DC</a> and see if the new password was right. When it was right it worked on the workstation. <br/><br/>You can stop this from happeneing with a domain security policy. Look for Interactive logon: Number of previous logons cached.<br/><br/></p></body></html> | |