To use persistent disconnected authentication with Windows 2003 Native Mode and higher, administrators must set the "servicePrincipalName" attribute on the users using this form of disconnected authentication. This can be done with the vastool setattrs command, as follows:
# vastool -u admin setattrs jdoe servicePrincipalName firstname.lastname@example.org
This step will allow the user to use persistent disconnected authentication. From the windows side, this can be done using the ADSI Edit utility, or with simple scripts that use the ADSI API's.