Lets say we have around 300 Windows XP machines on our ActiveDirectory domain that are used for processing something. Each has an account which is patterned on the machines name. As these are treated as normal domain accounts, they are subject to the monthly password change requirements.
We have techs who go through and change the passwords each month, but this is tedious, error-prone, and time consuming. In an effort to make it better, I am going to start changing the passwords on the 300+ accounts programatically.
This, however, presents a problem. The machines are logged on as the user accounts we are changing, and by default do not update the cached credentials, which eventually will lock the account out when it tries accessing locations on the network.
Is there any way to update the cached credentials on a machine without locking/logging? Perhaps a Policy setting?