https://live.paloaltonetworks.com/t5/globalprotect-discussions/issue-with-globalprotect-saved-credentials-and-password-changes/m-p/383663#M877 <P>Our users use GlobalProtect with Windows 10 to VPN to office from home.&nbsp; Users sign into their AD accounts in Windows first, then connect GlobalProtect second, using the same AD account.&nbsp; The first attempt to connect the VPN will always result in GlobalProtect requesting the user's account &amp; password.&nbsp; And subsequent connections happen without any credential requests as they have been saved in Credential Manager (so the user simply has to click 'Connect').&nbsp;&nbsp;When our users change their password in Windows/Active Directory, GlobalProtect should be prompting the user to update the password at the next sign on.&nbsp; It is not doing this in many cases and is resulting in AD account lockouts.&nbsp; We have even gone so far to have the user disconnect after a password change, shut down the laptop, power it back on, sign on, and then reconnect GlobalProtect.&nbsp; But GP still will not ask for a new password.&nbsp; Some users are actually able to connect with their old password AFTER the change.&nbsp; Other users are just locking their AD accounts when GP attempts to use those credentials over and over.&nbsp;&nbsp;</P><P>&nbsp;</P><P>Any suggestions for resolving this issue?&nbsp;&nbsp;</P><DIV class="ms-editor-squiggler">&nbsp;</DIV><DIV class="ms-editor-squiggler">&nbsp;</DIV> Wed, 03 Feb 2021 16:48:23 GMT jrauman 2021-02-03T16:48:23Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/issue-with-globalprotect-saved-credentials-and-password-changes/m-p/383663#M877 <P>Our users use GlobalProtect with Windows 10 to VPN to office from home.&nbsp; Users sign into their AD accounts in Windows first, then connect GlobalProtect second, using the same AD account.&nbsp; The first attempt to connect the VPN will always result in GlobalProtect requesting the user's account &amp; password.&nbsp; And subsequent connections happen without any credential requests as they have been saved in Credential Manager (so the user simply has to click 'Connect').&nbsp;&nbsp;When our users change their password in Windows/Active Directory, GlobalProtect should be prompting the user to update the password at the next sign on.&nbsp; It is not doing this in many cases and is resulting in AD account lockouts.&nbsp; We have even gone so far to have the user disconnect after a password change, shut down the laptop, power it back on, sign on, and then reconnect GlobalProtect.&nbsp; But GP still will not ask for a new password.&nbsp; Some users are actually able to connect with their old password AFTER the change.&nbsp; Other users are just locking their AD accounts when GP attempts to use those credentials over and over.&nbsp;&nbsp;</P><P>&nbsp;</P><P>Any suggestions for resolving this issue?&nbsp;&nbsp;</P><DIV class="ms-editor-squiggler">&nbsp;</DIV><DIV class="ms-editor-squiggler">&nbsp;</DIV> Wed, 03 Feb 2021 16:48:23 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/issue-with-globalprotect-saved-credentials-and-password-changes/m-p/383663#M877 jrauman 2021-02-03T16:48:23Z