I was wondering if someone could help out with problem. I have users who log on using Nortel VPN with WinNT laptops. If at the time of their logons, their password expired, they are not able to logon, or change the password (because of a local caching of the password on the machine). the resolution is to change the password for the Domain back to what user used to have, let user logon, and then make them change the password. Does anyone have a better solution? Thanks.