I’ve always wondered (and again two days ago) what “irreversible loss of information” is being referd to when you reset a local user password from the “Computer Management” console. Independantly, I’ve been tracking down a bug reported by one PMG Connect user in which the connection routine fails.
These things are linked. The bug was a call to cryptography API CryptAquireContext failing with error NTE_BAD_KEY_STATE. (Ok, I admit, if the software was reporting faults better, this could have been determined ages ago.) In short, it was attempting to open a key container that existed but couldn’t be used because the user had reset the password. Checkin the web, this occurs with a lot of software (one suggested work-around was to create a new user account!).
So, that’s some of what loss of information occurs. To fix this problem, the software attempts to open key containers with different names when that error is encounted.