Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We had a major network issue where our secondary domain controller (responsible for Win2k3 boxes) died and had to be rebuilt (I beleive this is what happened, I am a developer not network admin).

Anyway, I am working remotely via VPN at the moment and since this happened, I am getting an authentication box when trying to access certain areas of SDL Tridion via IE (Tridion 2009 SP1 is IE only) it seems like somewhere my credentials are not being passed correctly or the ones cached on my laptop do not match the ones the Domain Controller has.

This only seems to affect Windows 2003 servers. Our IT support thinks that the only way to sort it out is to connect my laptop directly to the network. I am not planned to go to the office for a few weeks at least and this issue means I have to work with Tridion via Remote Desktop. We thought changing the password on my account might work but this didn't help.

So basically my question is, is there any way I can reset my credential cache without having to reconnect to the network? Or is it IE that is causing the problem perhaps, since I can RDP to servers and use Tridion 2011 instances in other browsers fine?

I am on Windows 7 using SonicWall VPN client.

share|improve this question
We're not here to supplement your operations staff. This site is for professional systems admins. If your admins have a problem, have them ask here. – MDMarra Jun 23 '12 at 11:29
Ok. Apologies. Maybe SuperUser would have been a more appropriate forum.. – Rob Stevenson-Leggett Jun 23 '12 at 15:12
The question is about system administration, and is asked by someone acting in their professional capacity. i.e. not a question about home systems or whatever. It's a well-asked question that will help others, including those whose role is more tightly focussed than the questioner. +1 to counteract some of the negativity – Dominic Cronin Aug 23 '12 at 18:30
up vote 4 down vote accepted

If you login over a VPN and the resulting network you are connected to has sight of your AD domain then your computer should synchronise properly. Assuming of course your computer is domain-joined and the VPN can deal with AD traffic.

Usual tricks to 'synchronise' the account is to connect to VPN, then lock and unlock the computer. This will reveal whether your account has expired, locked etc. Changing the password has the same effect.

Aside from that there is also an IE security setting that controls how logged-on credentials are passed to websites. It's called "Automatic Logon with current username and password." But there are implications for switching this on and you need to speak to your sys admins.

As an aside, there is no such thing (since NT4) as 'secondary' domain controllers. And specific domain controllers are not responsible for specific OS versions. If there is a specific DC that is generally responsible for a specific group of servers it will be due to AD sites, but if that DC fails those servers should still be able to authenticate across the WAN, if your network is setup properly.

share|improve this answer
Thanks for your answer. I will ask about the IE setting. – Rob Stevenson-Leggett Jun 23 '12 at 15:15

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.