Users can't change passwords through RD Web Access anymore

Question

Hello everyone,
I recently have been tasked with setting up a forced password change policy to all our Active Directory users. Doing this, however, prevented the users from logging into any server that they were supposed to have access to with this error showing up:

And since all our servers are hosted locally (i.e. not on Azure), users cannot directly change their password through their RDP connection. So to provide a workaround I have hosted an RD Web Access portal on one of our servers (which is also a part of the same domain). The portal is accessible through a typical link: https://URLOFTHEMACHINE/RDWeb/Pages/en-US/password.aspx

And once I did that, I tried and I could change the user's passwords through that link successfully! However, I just tried again after a week and I can no longer change any passwords through the RDWA anymore as I see this error below:

Now, keep in mind that I can still login with the same username and password that I type in from the /RDWeb/Pages/en-US/login.aspx just fine but whenever I try to change the password I face that issue above.. can anyone help me with that? There have been absolutely NO changes on the server that is hosting this page since this is only a test server which was provisioned to do this simple task.

Answer 1

Hello

Thank you for your question and reaching out. I can understand you are having issues related to can not change password in RDS.

1. Please make sure in IIS -> Select Sites -> Default Web Sites -> RDWeb -> Pages in the right pane, select Forms Authentication.
2. Please try to change password any Different Domain User

---------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--

Answer 2

a little stupid question need to confirm with you, is your domain password policy for the minimum password age is longer than 1 week? :)

Answer 3

I finally figured out the issue with this one and it was related to the domain name..

Our domain name is something like the following: EXAMPLE.LOCAL

And every time we login to a remote session or even when we are logging in through /RDWeb/Pages/en-US/login.aspx we can not login with the first half of the domain name (in this case EXAMPLE).

However, for some weird reason, we could not update the password using the full name of the domain, we could only change the password by using the first half of the name.
To make it even more clear here is an example below:

Username: USER1
Domain Name: EXAMPLE.LOCAL

to login with RDP or even on RDWA, this is the case:
EXAMPLE\USER1 Does Not Work!
EXAMPLE.LOCAL\USER1 Works!

However, to change the password on RDWA, this is the case:
EXAMPLE\USER1 Works!
EXAMPLE.LOCAL\USER1 Does Not Work!

I am putting this out here just in case somebody else faces this issue, because this has baffled me for at least 2 weeks until I figured it out (embarrassingly enough, through a typo).