I'm looking for ways to prevent account lockouts by users who access domain resources on our domain from laptops that don't belong to our domain.
These people have to access file shares and 802.1x wireless secured with domain user credentials. Sometimes printers and Outlook mail for their user account on our domain from their own company laptops that belong to their company's domain.
Can smart cards be used on computers that are not joined to your domain instead of the user saving passwords on their systems that must be changed even though they cannot remember to change them?
A large percentage of these people forget to change the passwords in the saved credentials and they have to contact the hep desk to get password unlocks and password resets several times a year. This is a hassle and waste of time for both the user and the help desk.
There has to be a better way.