They usually connect to our network by a VPN. Right now there is just the (password protected) Administrator account and their domain user account on the laptop. Windows 7 and Server 2008R2 in use here.
I want to change their password or disable/lock their account and have it take immediate effect so that they cannot get to our domain at all, or get to any files on the laptop.
If they're logged in already, do they have to log out first? If they're not logged into the VPN, won't the computer just save their previous password/credentials if they log on when not connected to any network?
Is there another way to do what I want to do?