mmarable thanks for the good answer. However - what id there is no VPN? Consider the scenario where there is a remote user with cached credentials and disconnected from domain for a prolonged period of time. Is there a way to reset cached password without domain being available?