Domain Account syncing over RDP session? (no VPN) - How is this possible?

Question

Here is the situation: 1) user logs into laptop (off domain/lan) with cached domain creds and then logs into RDP session, changes domain password 2) when user logs back into laptop, the old cached creds dont work, only the new one? How is this possible over an RDP session? Typically a user has to re-connect the laptop to the domain to update the cached creds. Observed on Windows 10 desktops

Answer 1

What method are they using to change the password and which document are you following?

If the password only expired recently or was about to expire, I think it's possible that they may have been allowed to change it.