Hello
Our domain forces password changes periodically and we have domain joined Win 7 sp1 laptops and allow cached credentials. If the laptops are NOT currently plugged into the domain the users can login with cached credentials current when the laptop was last connected - this means that the password could be 'password1' on the laptop for the cached domain user whilst on the domain the current password could be 'password2'. Until these passwords are in-sync the users cannot access the domain from the laptops.
Currently our RDS server does not have SSO enabled so this does not pose a problem as the users are prompted to enter their current username and password to login. If we enable SSO what is the expected bahviour, obviously SSO will not work but will the users be prompted for current credentials or denied until the laptops credentials are in-sync with the domain?
Thanks