When a computer running Windows XP Professional is joined to an Active Directory domain, the computer uses a computer account password to authenticate with the domain and gain access to domain resources. By default, the domain-joined computer initiates a change to the computer account password automatically within every 30-day period. A domain controller accepts the password change and allows the domain-joined computer to continue to authenticate. The new password is stored locally on the domain-joined computer and can be confirmed by Active Directory. If a password change fails, or if a domain-joined computer attempts to use an incorrect password, the computer will not be capable of accessing the domain.