I have users who connect using a VPN connection on several different PC’s in Windows 2000. They have created Domain accounts on these PC’s. VPN connection is not made until after they are logged in using a custom application. Once they were requiredto change their Domain P/W it put all other PC’s out of sync. I have searched MS Knowledge Base (Q149176)and cannot find out how to change just the cached domain P/W without actually changing it on the Domain. Problem encountered is they can make VPN connection but cached account P/W is passed for corporate resources and denied. If locally cached Domain account P/W could be reset without having to validate to the Domain it would solve my problem. Changing Domain P/W on each machine woudl createan endless loop fo password changed to access the domain from various PC’s. Thanks a million in advance! PS Yes I could just tell the user to use a local account instead of a Domain account but that is not my question. Answer it or pass. Thanks!