Hello,
I'm hoping someone can provide some insight on some issues we are seeing with SEE. We are currently using 8.2.1 MP2. I am running into SSO problems with password syncs in two scenarios for users in remote offices. From what I can tell, SEE only synchs that password if the user changes it using Ctrl-Alt- Del or at login if the user is connected to the network. We have many remote users who only connect to the network using a Cisco VPN client that does not have the abilty to connect before login. When they login to the computer they are not connected to the network, they login to the PC using cached credentials. Many times the user will fail to notice the password has expired and will have to call to have the password reset in Active Direcory User and Computers. Once the admin resets the password the password is not synched with SEE. The only workaround I have found is to connect to the users PC and login to SEE as an administator unregister the account and then have the user register again. We can also have the user change the password, but due to security polices, they have to wait 48 hours to do this.
In the second scenario, the user will have multiple computers and will change it on the first computer by pressing control alt delete. They connect to the VPN on the second computer and lock the computer, then unlock to update the AD credentials but the SEE password doesn't synch. This forces and admin to connect and unregister the account so they can register again.
Is this documentated behavior or does anyone know of a way to force the passwords to synch? It's not ideal but I could also get by with a script that would unregister the account.
Thanks!