Password change issue with Active Directory on Windows

The following problem occurs for password changes when using Active Directory as the ISAM user registry and the Active Directory server is running on Windows. Depending on certain Active Directory policy settings, old passwords can still be used to log in to ISAM after a password change has occurred. By default, both the old and the new passwords continue to work for approximately one hour after the password change. After one hour, the old password stops working.

Windows introduced this behavior into Active Directory. See the Microsoft KB article 906305 for information about what occurs and for instructions on disabling the behavior if necessary.

http://support.microsoft.com/?id=906305

Parent topic: Logout and password change operations