Cookie and User Password both expired

[raji_toor]

A user while connected over VPN has his password expired and does not renew in time. So the local system will have the information that account is expired and would not let login. Also during the same time GP cookie expires and that means there is no pre-logon tunnel that enables password reset remotely by user himself.

Is giving local admin password temporarily or make him bring his laptop to campus where it can again connect to AD are the only options to fix it. Is there anything else that can be done.

[dmifsud · Accepted solution]

Try adjusting the cookie lifetime on the Portal/Gateway to cover when the cookie was generated.

The endpoint doesn't know the cookie is expired, this is something that's checked server side since different Gateways could have different cookie lifetime settings.

I believe the local cookie should still be valid. You can try changing the lifetime to a month or whatever (hopefully) works, and then change it back to the usual setting once the password has been changed properly.

Regards,

- DM

[raji_toor]

Thank you @dmifsud that worked.