NT password changing through AS5300

[c.ebinger]

We are about to change our NT policy to require user to change passwords. Can that change request flow through an AS5300 access server for remote user?

Is there any thing I need to do to the AS5300 config.

[thomas.chen]

It sounds like your users are authenticating right off the NT database and you are not using a separate ACS server. If this is the case, nothing needs to be done on the AS5300. If you are using an ACS server, make sure that it isn’t caching the NT database.

[mlord]

We have 2 X AS5300 and CiscoSecure 2.4 with NT DB validation. Once past validation on the 5300 and user has logged on to the network they can change their NT password. Problem we have is if their NT password has expired they can't get past AS5300 validation so they're locked out of the network. Is there any work round for this other than never expiring NT passwords or a separate DB which I presume would have a load of users in with never expiring passwords.

[chsmith]

I to am having the same problem. I have a tac case open and we are about to start working with prod development to get a work around. I will keep you posted.