Change expired domain password through VPN connection

[Guest]

Hi All,

We have a RRAS server in our office that our remote users connect to using a
VPN connection. The problem I am having is that these users cant connect once
their password expires. When they attempt a connection in this situation the
system throws and error stating that the username and password combination is
incorrect. Is there a way to allow these users to change their password
through a vpn connection and not actually have to be on our network to do so.
We have some users that only connect to our network using vpn. Please help.

Ky

 

[Sam Salhi [MSFT]]

The only protocols that support change password are MSCHAPv1 and MSCHAPv2.
You must enable these protocols for your clients to be able to change
password. (if you're using RADIUS through IAS, you need to check the box
that says, "Allow users to change password after it has expired" this check
box is ON by default )