Assurance

[Brian Arkills <>]

There also may be issues of when a user changes their password, for a time the 802.1X client may be trying to use the old password and causing the account to be temporally suspended. Does anyone have ideals of how to best mitigate this?

[BA] If AD is behind the authentication here (which you've indicated), then the "old" password is still accepted as valid for a limited period of time after a password change, if NTLM is used (which extends to NTLMv2 and simple/basic bind). The period of overlap is by default an hour, but is configurable: http://support.microsoft.com/kb/906305. So whether your question constitutes something that actually happens depends on whether the time the 802.1X client caches the old password is longer than that AD overlap period.