For AD user password reset option

[SurajN]

We have seen that whenever a domain password is  going to expire for the SSL VPN user, the Global Protect client on the user's system starts flashing a message that the password will expire soon. We want to know if there is any possibility to embed a password reset link as well along with such a message.

Please help us on the same so that we convey it to the end users.

There is any option in global protect for reset AD password.

[S.Cantwell]

Hello

Within the client config is this option

So I do believe it is possible to put in a link.

As far as a reset link.. the immediate answer is no..... but then, if you decide to implement with pre-login (which creates a VPN before a user even logs onto the computer) would allow a way to change the password.  The computer would already be connected to the domain, and then the user can reset the password right on the login page of the Windows machine.

[BPry]

@SurajN,

Just to expand on @S.Cantwell's answer a bit, if you have a self-service portal you can utilize the custom message to provide a link to that resource to allow folks to change their password prior to it being expired. 

If you want to allow a user to change an expired password utilizing GlobalProtect without having to setup a pre-login, you can actually do this directly through GlobalProtect. You need to be utilizing RADIUS authentication and setup PEAP-MSCHAPv2 as your auth protocol, but if setup properly it'll allow a user to actually change their AD password. You can view information on how to set that up HERE

[B.Alimov]

The link is dead for some reason.

[kiwi]

Hi @B.Alimov ,

So about that document ... yeah the link is dead because it's pointing towards an end-of-life version of the page.  However, I think I can help you with that.

EOL guides are also posted in PDF format. Here is the 4.1 guide: https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/globalprotect/4-1/globalprotect-app...

To get to the EOL Resources page: https://docs.paloaltonetworks.com/resources/eol

From here you can filter on product, version, etc...

Hope this helps,

-Kim.