Change password at next logon not working

Question

I have enabled "User must change password at next logon" for an AD account in AD.
This AD account is configured under "Remote Desktop User" Group in a windows 2016 server.
However, when I used this AD account to remote access to the window server, the window did not force me to change password but allow me to login instead.
Is there any missing configuration?

Answer 1

Hello

Thank you for your question and reaching out. I can understand you are having issues related to Password change at next login not working.

1. Please check Group Policy for "Minimum Password Age". It may be overriding the attempts to change the password.
2. Please check that AD replication is Good across all Domain controllers.

Another reason may be if you configure this setting and the user is prompted to change their password, replication latency may cause the user to receive a message that states that their old password is incorrect after they type their old password.

Reference :

https://learn.microsoft.com/en-us/troubleshoot/windows-server/user-profiles-and-logon/user-must-change-password-at-next-logon-setting

-----------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--