I'm having a strange issue with a few colleagues who work remotely using laptops connected to our company domain. They log in fine in the morning and can access a remote desktop gateway after passing 2-factor authentication. However, after their laptops automatically lock due to inactivity, they encounter a 'Password incorrect' message when they try to unlock their screens. Interestingly, when they disconnect from their home network (either by unplugging the cable or turning off WiFi), they can log in without any problems. This issue seems to only occur after their laptops have been active for an extended period of time. Both the client laptops and our domain controllers are up-to-date and I've confirmed they have matching times. I've checked their network settings and cached credentials, but nothing stands out. Has anyone experienced this before or have any ideas on what might be causing it?
1 Answer
It sounds like the issue might be related to how the laptops are handling their connections to the domain controllers. When they're at home, they probably can't reach the DC, which could lead to a failure when trying to authenticate. It could be a problem with cached credentials or something specific to the Kerberos renewal process. I’d recommend checking if the laptops are having any trouble reaching the domain controllers from home or if there are any odd settings in their home network or firewalls. Since it's only affecting two users, it might be something unique to their profiles or settings.
Thanks for this insight! I hadn’t considered the network reachability aspect yet, but I’ll definitely look into the firewall settings at home. I checked the credential manager and didn't see any saved credentials, but I’ll see if reinstalling the remote desktop client helps.