Home/ Questions/Q 264027
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-11T22:39:04+00:00

I’m witnessing some strange behavior with SharePoint when changing user’s Active Directory passwords. I

  • 0

I’m witnessing some strange behavior with SharePoint when changing user’s Active Directory passwords.

I created a custom Application Page to change a user’s password in Active Directory. The code seems to be working great as I can verify within Windows that the password was changed.

However, the strange thing is that after the password change, SharePoint will allow the user to log in with both their newly changed password and their old password. Essentially allowing them to log in with two different passwords.

I verified that this is something within SharePoint as I can only log into Windows with the newly updated password.

Does anybody know why this would happen? I can’t seem to find any info on the web regarding SharePoint caching credentials or anything. Any thoughts would be greatly appreciated.

Thanks in advance.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    This is expected behaviour: http://support.microsoft.com/kb/906305

    Microsoft Windows Server 2003 Service Pack 1 (SP1) modifies NTLM network authentication behavior. After you install Windows Server 2003 SP1, domain users can use their old password to access the network for one hour after the password is changed. Existing components that are designed to use Kerberos for authentication are not affected by this change.

    • 0