old domain password working when offline

Question

We have a number of workstations joined to our AD domain that users have been unable to log into with current password -- when offline. However, they are able to use their previous password to login successfully.

I would expect cached credentialing to only allow them in using their current password. What am I missing here? Thanks!

Answer 1

Seems reasonable if they pcs were still offline. Also read on here.
https://learn.microsoft.com/en-US/troubleshoot/windows-server/windows-security/new-setting-modifies-ntlm-network-authentication#ntlm-network-authentication-behavior

--please don't forget to upvote and Accept as answer if the reply is helpful--