https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-with-nps-and-expired-password-change/m-p/523723#M3486 <P>Hi,</P> <P>I have GP with authentication over NPS (PEAP-MSCHAP2) against active directory configured. Either in Radius server profile and NPS policy configuration "<SPAN>Allow users to change passwords after expiry"</SPAN>&nbsp;is enabled.</P> <P>User with expired password while logging to GP gets window for password change but the change seems to not be written back to AD so the same window for password change appears again.</P> <P>GP clinet 6.1.0-58, Pan-OS 10.2.2-h2</P> <P>Did anyone managed to configure this properly ?</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 09 Dec 2022 17:07:08 GMT Janusz.Kubik 2022-12-09T17:07:08Z https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-with-nps-and-expired-password-change/m-p/523723#M3486 <P>Hi,</P> <P>I have GP with authentication over NPS (PEAP-MSCHAP2) against active directory configured. Either in Radius server profile and NPS policy configuration "<SPAN>Allow users to change passwords after expiry"</SPAN>&nbsp;is enabled.</P> <P>User with expired password while logging to GP gets window for password change but the change seems to not be written back to AD so the same window for password change appears again.</P> <P>GP clinet 6.1.0-58, Pan-OS 10.2.2-h2</P> <P>Did anyone managed to configure this properly ?</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 09 Dec 2022 17:07:08 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-with-nps-and-expired-password-change/m-p/523723#M3486 Janusz.Kubik 2022-12-09T17:07:08Z