How to change domains users passwords through VPN?

Question

Hi everyone!

We have an old problem that today, in the pandemic, has surfaced again. How do I get domain users to change their passwords through VPN? Is it possible to use Network Policy Server (RADIUS) to reach that?

Hope I was clear enough.

Answer 1

Hi ,

Based on my understanding, you want to allow VPN client (domain user) to change their password themselves when password expired. Is that right? Please feel free to let me know if my understanding is wrong.

Did you want to achieve the following goal?When password has expired, VPN clients can change their password by themselves.(I used windows build-in VPN client to do the test, we have no third-party VPN client in our lab to do the test.)

If yes, just check Allow client to change password after it has expired in EAP MSCHAPV2 Properties from NPS network policy. Then we can change password by ourselves when password expired.

If we did not check this option, then after password expired we cannot connect to VPN. As the picture below:

Hope this can help you.

--Please Accept as answer if the reply is helpful--

Best Regards,

Candy

Answer 2

Try;

• Click Start.
• Type osk.
• Hit enter.
• Once the On screen Keyboard is open, hold ctrl+Alt on your physical keyboard, then click on the DEL key in the on screen keyboard.
• Minimize the on screen Keyboard.
• Click Change a password.
• Close osk.

--please don't forget to Accept as answer if the reply is helpful--

Answer 3

What problem are you having? What are you missing?

• From run box type osk then ENTER (starts the on screen keyboard)
• Once the on screen keyboard is open, hold ctrl+ Alt on your laptop keyboard, then use mouse to click on the DEL key in the on screen keyboard.
• Minimize the on screen keyboard (to get it out of the way)
• Click Change password, and done

--please don't forget to Accept as answer if the reply is helpful--

Answer 4

Are you saying password expires while not connected? In that case maybe they can use outlook web access to change it.

Answer 5

What do you use for VPN? With Cisco AnyConnect, it's best to login with cached credentials and connect to VPN. Then hit Ctrl-Alt-Del and reset the password. Next step, would be to lock the computer and unlock with new password. * Do not log off and kill VPN connection *

If you need to alert users of their passwords expiring (before a helpdesk ticket is needed), check out this script:

AD-account-expiry-199b5ae7