Couple domain users have issue with Password changes recently. Their account are being locked out continuously everyday.
I found they all have RDP permission to different servers / Desktops and they usually disconnect the RDP session without completely logoff from the Domain. I can reproduce the problem by resetting my domain admin account. Once I logoff all my disconnected sessions. Issue gone.
Does anyone know how often Windows servers will renew disconnected / connected users credentials ? [Windows 2003R2 / Windows 2008R2]
What protocol will be used ? Kerberos / NTLM ?
Thanks.