I'm trying to get my head around the expected behavior here and I must be missing something. As Michael states, the user is still using the old ticket, but it should expire after the default 15 minutes, right? Or is it using the Kerberos service token with a 10 hr expiration?
http://support.microsoft.com/kb/152526 discusses the IIS user tokens and their default update interval of 15 minutes. But the kerberos service token is good for 10 hrs. Since my user's phone didn't ask for the new password for about 4 hrs, I'm assuming the token used for access was the service token. So what is the IIS user token and why isn't it doing anything? Obviously there is a gap in my knowledge, but I'm not finding a bridge. Can someone shed some light on my dimness. -Bill On Mon, Mar 7, 2011 at 11:41 AM, Michael B. Smith <mich...@smithcons.com>wrote: > Works as designed. > > > > IIS still has a valid ticket with the old password. Bounce IIS or recycle > the app pool and it’ll stop working. > > > > Regards, > > > > Michael B. Smith > > Consultant and Exchange MVP > > http://TheEssentialExchange.com <http://theessentialexchange.com/> > > > > *From:* Bill Songstad [mailto:bsongs...@gmail.com] > *Sent:* Monday, March 07, 2011 2:13 PM > > *To:* MS-Exchange Admin Issues > *Subject:* activesync on iphone still syncing after password change > > > > I have a user that forgot their password after a few weeks of using the > password. Couldn't log into OWA manually, but their iphone was able to send > and receive fine with the cached password. We reset the password on the > domain. User logs in to OWA using the new password. Does not change the > password on iphone. Now the user is sending from OWA and the iphone. Two > passwords. One account. Success both ways. My knowledge tells me this is > impossible. My eyes tell me otherwise. Could this just be the old > activesync "session"? or is something horribly wrong? or another option > more likely? > > > > as always, thanks for any assistance, > > > > -Bill > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe exchangelist > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe exchangelist > --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
