I am about to setup 12 new laptops on our 2k3 domain. I know I can use the domain login for each user on their laptop, and that xp will cache it so they can logon when they are not on the network, but my question is this. How does xp handle the cached login if the domain has a password expiration policy. Some of these users are rarely in the office. They usually get prompted for reset when they log into the vpn. Will xp be smart enough to cache that new password from the vpn change so the next time they log onto their laptop it will want the new password?