How Do You Reset an Expired Domain Password While Working Remotely?
An end user's domain password expires while they are working from home. The end user tries to reset the password using Ctrl+Alt+Delete and then receives the following message: Configuration information could not be read from the domain controller, either because the machine is unavailable or because access denied. Which of the following will resolve this issue?
Community Insight
Tests whether you recognize a domain-controller reachability failure as a network-connectivity problem rather than an account problem — the trap is assuming Active Directory itself must be reset or that a simple reboot will help.
An expired domain password cannot be changed from a home network because the workstation has no path to a domain controller, producing the 'configuration information could not be read from the domain controller' error. Connecting to the corporate VPN restores that path so the password change can be processed.
Choosing 'Reset the account in Active Directory,' because the error mentions the domain controller and the password expired — but a password reset performed by an admin does not fix the fact that the remote laptop simply has no route to any DC.
Community Discussion (5 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
A domain-joined Windows machine does not cache the ability to change an expired password forever; once the cached credential is exhausted, Ctrl+Alt+Delete triggers a call to a domain controller over the secure channel. From a home network the laptop is on a different subnet with no route into the corporate environment, so that call fails with the "configuration information could not be read from the domain controller" message. A VPN client establishes an encrypted tunnel back to the corporate network, giving the machine an IP path to a DC (and to DNS that resolves the DC locator records), which is exactly what option B provides. Once the tunnel is up, the user can complete the password change at the Ctrl+Alt+Delete screen. Community consensus agrees: as Elle put it, connecting to the VPN "will establish a secured tunnel back to the corporate Network."Why the Other Options Are Wrong
Restarting the computer (A) changes nothing about reachability — the machine will boot to the same isolated home network and fail identically. Resetting the account in Active Directory (C) is an administrative action that may be needed later, but it does not put the laptop in contact with a DC, and the user still cannot set a new password from that machine; the question also asks what the end user can do to resolve it. Joining the Wi-Fi network (D) is already assumed — the user is on the internet, which is precisely why a VPN tunnel is the missing piece rather than basic wireless connectivity. One commenter summarized the reasoning with "VPN is the only option," since ordinary Wi-Fi alone does not grant access to internal domain resources.Community Comment Notes
Every commenter who answered selected B, making this one of the clearer scenarios in the pool. Ishan94 framed it directly: "VPN establishes a secure connection to the corporate network, allowing the laptop to access the domain controller." Another learner stressed that the error text is itself the hint — the problem is connectivity to the DC, not the DC's data. This aligns with the exam's habit of embedding the root cause in the error message; read the wording literally before jumping to an account-management fix.Exam Strategy
When an error message names a server or service as unreachable, first ask which option restores the network path rather than which option edits data on that server. Here, VPN is the only choice that creates a route to a domain controller from a home network.
Frequently Asked Questions
Why can't the user just reset the password in Active Directory instead?
An admin reset does not give the remote laptop a route to a domain controller, so the user still cannot sign in; the missing piece is the VPN tunnel.
Why is joining the Wi-Fi network not the fix for this domain controller error?
Wi-Fi only provides internet access. The laptop still needs an encrypted tunnel into the corporate network before it can contact a domain controller.
Related Analysis
Practice All 220-1201 Questions
Access 105 questions with complete answers and detailed explanations.
View Full 220-1201 Practice Test →