Enable user to change password when connected by VPN

[fs483]

Hello,

I have a customer where a large number of employees connect through VPN (on a Windows 2003). Is there a way to allow them to change their passwords at will and also before it expires ?

Thanks
akwong

 

[GrimR]

When in the office = Ctrl + Alt + Delete -> Change Password [Unless that's been disabled via GPO]
If they are out I can't see how they will get in to change an expired password.

 

[Davetoo]

Are they connecting to the VPN from a machine that is part of the domain and are they logging onto that machine using their domain account?

If yes, then after they login to the VPN, they simply press CTRL-ALT-DEL, change password, then they have to lock their computer and unlock it using the new password while connected to the VPN still.

Also, most VPN clients have an option to logon to the VPN first before logging onto the computer. If they do that, then when they logon to the computer they'll get notified that their password is going to expire in "X" days, assuming you have that GPO set.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

 

[fs483]

no, the clients's laptops/pc are not members of the domain. Those machines have never been in the office and never will be. The servers and the workstations are on different continents. The machines are part of their local domain.

 

[Davetoo]

You mean the users that are connecting via VPN are not part of any domain and instead are just in their own systems workgroup?

How are you enforcing a password policy if they're not part of a domain?



I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.