Accept users without validating credentials dating people different cultures
I use a do-until that gives the user three tries to put in the right credentials and then it exits.
An SSPR solution allows the AD credentials to be reset but does nothing to affect the cached credentials on the client machine.Cached credentials allow a user to access machine resources when a domain controller is unavailable.After a successful domain logon, a form of the logon information is cached.Yes, this sounds like a bummer but it’s actually a good thing.Check out the following excerpt for an explanation.
Search for accept users without validating credentials:
Then all kinds of problems can occur when a user tries to access domain resources and the main problem is repeated account lockouts because the Windows client is passing invalid cached credentials to a domain controller.