This document is intended to provide end users with best practices information to change a Windows logon password when off campus. 

 

 

 

 

Information

 

There are two factors that will affect the experience when changing the UNITY ID password:

1. Logging into your Windows device using your Unity ID before you’ve connected to the NCSU VPN. (Non-SBL)
2. Logging into your Windows device using your Unity ID after you’ve connected to the NCSU VPN. (SBL)

 

Logon to Windows After VPN Connection (SBL)

Logging into your computer using your Unity ID after you've connected to the NCSU VPN is typically referred to as “Start or Sign-in Before Logon” (SBL)  Essentially you are making the connection to the campus network through the VPN before you authenticate in the operating system so all the connections needed are already in effect. Using the SBL configuration is recommended for Windows devices because it improves reliability of service and the overall experience.

• Customers of the OIT Managed Desktop Service receive the SBL VPN configuration by default.
• Follow the process for "Start Before Logon - Authenticating to the VPN Prior to Windows Logon"
• Please check with your local IT support staff to determine if your Windows device uses the VPN Client with SBL enabled.
  
  • If your machine is not configured for SBL you may skip to "Logon to Windows Before VPN Connection (non-SBL)"

 

Password Change Using SBL [RECOMMENDED]

This describes password change behavior using the recommended SBL configuration.

1. You have connected to the NCSU network via VPN using SBL.
2. You are logged onto your Windows device.
3. You successfully change your password in the OIT password change page.
   
   • The password change is pushed to wolftech Active Directory as well as Google.
4. Windows eventually starts warning you that it needs to refresh your credentials.
5. Lock your Windows session (Windows key+L), then unlock it with your new password.
6. Your local cached credentials are then updated with your new password.

 

Using SBL After Password Change On Another Device

This describes password change behavior after having changed the password on another device and then logging onto Windows using SBL.

1. You are not logged onto your Windows device.
2. You successfully change your password in the OIT password change page from another device, perhaps your phone or a desktop on the campus network.
   
   • The password change is pushed to wolftech Active Directory as well as Google.
3. Choose the SBL VPN option and then logon to your Windows device.
4. Simply use your new password when logging into your system.

Logon to Windows Before VPN Connection (non-SBL)

 

Password Change Using the VPN After Windows Logon 

This describes password change behavior using the standard, non-SBL configuration.

1. You are logged onto your Windows device.
2. You start a VPN session.
3. You successfully change your password in the OIT password change page.
   
   • The password change is pushed to wolftech Active Directory as well as Google.
4. Windows eventually starts warning you that it needs to refresh your credentials.
5. Lock your Windows session (Windows key+L), then unlock it with your new password.
6. Your local cached credentials are then updated with your new password.

 

Password Change On Another Device & Logon Without Using SBL  

This describes password change behavior after having changed the password on another device and then logging onto Windows without using SBL.

1. Your Windows device does not have SBL configured.
2. You are not logged onto your Windows device.
3. You successfully change your password in the OIT password change page from another device, perhaps your phone or a desktop on the campus network.
   
   • The password change is pushed to wolftech Active Directory as well as Google.
4. Turn-on or Restart your Windows device and log into it with your *old* password.
   
   • This is necessary, and your only option, because your device has not yet connected to the NCSU network to get the new credentials synchronized.
5. You start a VPN session. Wait a five minutes while your device synchronizes to wolftech AD.
6. Lock your Windows session (Windows key+L), then unlock it with your new password.
7. Your local cached credentials are then updated with your new password.

This article is a child page of KB0016645 - Unity Account Password Change Behavior for Off-Campus Devices.

 

Escalation

 

Any questions on process or content contained in this document should be escalated through the NCSU Help desk and a have an incident assigned to the OIT_DESKTOP_SUPPORT team. 

 

 

Related Documentation

 

https://ncsu.service-now.com/sp?id=kb_article&sys_id=24b85c591b774c906714ed7dee4bcbc2

https://en.wikipedia.org/wiki/Windows_key

https://ncsu.service-now.com/sp?id=kb_article&sys_id=73c7e352db5844d084129ac5db9619fe

https://selfserviceidm.ncsu.edu/NCSUSpringMVCTemplate/pwdchangeform.htm

https://ncsu.service-now.com/sp?id=kb_article&sys_id=dbd978e51bf748d06714ed7dee4bcb34

 

Title: Windows Operating System Behavior for Remote Password Changes

Service: Unity ID/Password Management

Template if applicable: NA

Assignment Group(s): OIT

Document Owner: OIT_DESKTOP_SUPPORT

Available Priorities: Critical, High, Medium, Low

Keywords: how to change my password off campus, password changes off campus, remote password changes, how do I change my password from home, password changes, UNITY, how to I change my password, password change behavior, OIT Managed Desktop Service, macOS password changes, Windows password changes, my password won't work, IS IT REALLY THIS COMPLICATED, Unity Account Password Change Behavior for Off-Campus Devices, windows,