Window clients time is not updating in active directory domain
Only code running in-process with the LSA can read and write domain credentials.Applications are limited to writing domain credentials.The logon credentials are cached by the operating system so that a single sign-on gives the user access to many different resources.
For example, an application can require users to enter a user name and password provided by the application or to produce a to access a website.
Credentials Management provides customizable cache management and long-term storage for generic credentials.
Generic credentials can be read and written by user processes.
Applications use Credentials Management functions to prompt users for application-defined, generic, credential information, such as user name, certificate, smart card, or password.
The information entered by the user is returned to the application for authentication.