Logging in with two passwords?


Can anyone shed some light on this?

Our users have a generic password set when their account is created.

They then have the rights to change the generic password to a personalised password.

The problem is that after the password is changed the user can log to their network space using either the new password or the "old" generic password.

Anyone got any ideas why and how we might overcome and ultimately prevent this?