Windows Operating System Behavior for Remote Password Changes

There are two factors that will affect the experience when changing the UNITY ID password:

1. Logging into your Windows device using your Unity ID before you’ve connected to the NCSU VPN. (Non-SBL)
2. Logging into your Windows device using your Unity ID after you’ve connected to the NCSU VPN. (SBL)

Logon to Windows After VPN Connection (SBL)

Logging into your computer using your Unity ID after you've connected to the NCSU VPN is typically referred to as “Start or Sign-in Before Logon” (SBL)  Essentially you are making the connection to the campus network through the VPN before you authenticate in the operating system so all the connections needed are already in effect. Using the SBL configuration is recommended for Windows devices because it improves reliability of service and the overall experience.

• Customers of the OIT Managed Desktop Service receive the SBL VPN configuration by default.
• Follow the process for "Start Before Logon - Authenticating to the VPN Prior to Windows Logon"
• Please check with your local IT support staff to determine if your Windows device uses the VPN Client with SBL enabled.
  
  • If your machine is not configured for SBL you may skip to "Logon to Windows Before VPN Connection (non-SBL)"

Password Change Using SBL [RECOMMENDED]

This describes password change behavior using the recommended SBL configuration.

1. You have connected to the NCSU network via VPN using SBL.
2. You are logged onto your Windows device.
3. You successfully change your password in the OIM password change page.
   
   • The password change is pushed to wolftech Active Directory as well as Google.
4. Windows eventually starts warning you that it needs to refresh your credentials.
5. Lock your Windows session (Windows key+L), then unlock it with your new password.
6. Your local cached credentials are then updated with your new password.

Using SBL After Password Change On Another Device

This describes password change behavior after having changed the password on another device and then logging onto Windows using SBL.

1. You are not logged onto your Windows device.
2. You successfully change your password in the OIM password change page from another device, perhaps your phone or a desktop on the campus network.
   
   • The password change is pushed to wolftech Active Directory as well as Google.
3. Choose the SBL VPN option and then logon to your Windows device.
4. Simply use your new password when logging into your system.

Logon to Windows Before VPN Connection (non-SBL)

Password Change Using the VPN After Windows Logon 

This describes password change behavior using the standard, non-SBL configuration.

1. You are logged onto your Windows device.
2. You start a VPN session.
3. You successfully change your password in the OIM password change page.
   
   • The password change is pushed to wolftech Active Directory as well as Google.
4. Windows eventually starts warning you that it needs to refresh your credentials.
5. Lock your Windows session (Windows key+L), then unlock it with your new password.
6. Your local cached credentials are then updated with your new password.

Password Change On Another Device & Logon Without Using SBL  

This describes password change behavior after having changed the password on another device and then logging onto Windows without using SBL.

1. Your Windows device does not have SBL configured.
2. You are not logged onto your Windows device.
3. You successfully change your password in the OIM password change page from another device, perhaps your phone or a desktop on the campus network.
   
   • The password change is pushed to wolftech Active Directory as well as Google.
4. Turn-on or Restart your Windows device and log into it with your *old* password.
   
   • This is necessary, and your only option, because your device has not yet connected to the NCSU network to get the new credentials synchronized.
5. You start a VPN session. Wait a five minutes while your device synchronizes to wolftech AD.
6. Lock your Windows session (Windows key+L), then unlock it with your new password.
7. Your local cached credentials are then updated with your new password.

This article is a child page of KB0016645 - Unity Account Password Change Behavior for Off-Campus Devices.