Password changes using the Cisco VPN Client

[cgervasini]

We are using a 3015 and are authenticating VPN users using our NT Domain Controllers. We require users to chage their passwords every couple of months. We have a few users that only connect to our network via VPN and they do not get notified from the Cisco VPN Client that their passwords are going to expire and to be changed, they only get authentication failures. They then have to call in and have our helpdesk change the password for them. Is there a way to notify them that thier passwords need to be changed and allow them to change it using the Cisco VPN Client?

[gmiiller]

You can do this with the VPN client, but it requires that your VPN concentrator be authenticating to your domain controller using Radius (with expiry). This means that when a users password is due for renewal, they are prompted to change it when authenticating to the VPN concentrator (after entering the old one)

It doesn;t give users the ability to change passwords at other times, only when the existing password has expired