Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 29 subscribers
  • Views 817 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG Windows Ad/Domain password expired

Simplified Sam

Hello,

what option does a User who is completly working from remote, to change his AD/Windows Password?
(the credentials should be write back to the machine, so all Apps like outlook and next login has the new password.)

Or do Admins now days set the password to not expire, since it's safe?

The only option i could think of is open firewall ports from vpn to the domain controller, but that sounds dangerous to me.



This thread was automatically locked due to age.
Parents
  • 0

    I would challenge this concept by looking into modern technologies. 

    Microsoft addressed this question by using Azure AD with the Microsoft Client. No need to interact with a on prem AD (which makes the entire conversation obsolete). 

    Then you can top this design with other technologies like intunes or other software deployments. 

    In the end could you replace VPN by approaches like ZTNA, which goes integrated in such technologies above. The end state will be: Users can work from home like they work in the company - Zero changes and zero VPN. 

    __________________________________________________________________________________________________________________

Reply
  • 0

    I would challenge this concept by looking into modern technologies. 

    Microsoft addressed this question by using Azure AD with the Microsoft Client. No need to interact with a on prem AD (which makes the entire conversation obsolete). 

    Then you can top this design with other technologies like intunes or other software deployments. 

    In the end could you replace VPN by approaches like ZTNA, which goes integrated in such technologies above. The end state will be: Users can work from home like they work in the company - Zero changes and zero VPN. 

    __________________________________________________________________________________________________________________

Children
  • 0 in reply to LuCar Toni

    We are small company, which are sadly on premise, so hybrid option are a no go.
    (The users have notebooks which are domain joined, not sure how you could do this with complete sepearte domain.)

    Could you explain how ztna works? If i understand correctly you got client on each pc, which connects to sophos cloud, and sophos cloud is connect with our servers over server-client? And the benefit of ztna is, that i have the connection only for the application and not for the entire vpn network?

    (And the current internet provider is not fast enough or reliable for us right now.)

Unfiltered HTML