VPN, Active Directory, and password changes..

[2tramsay]

Hi All..

We have a VPN 3015 concentrator and use radius authentication to pass the authentication to Active Directory. Works like a charm, except for one thing. Our users do not get a prompt to change their password when connecting across the VPN. AD passwords are set to expire every 90 days here (security policy requirement). This has never been a big issue here as generally speaking, our users are in the office, and know to change their passwords while at their desk. We now have some users who access our network exclusively over VPN. IS there a relatively easy way to allow the prompt to change an expired password with the setup I have?

Thanks...

[stomasko]

I think what you are looking for is Radius with expiry. Check out this link for help with configuration:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a00800946b9.shtml

Hope this helps.

Steve