Ever wondered how to configure when you get prompted for user credentials when logging onto a remote system via Remote Desktop (Terminal Services)?
Well, chances are that this might come in handy – especially fi you encounter issues which stem from an expired password (hence, the title of this article). I was prompted with a pre-connection Authentication challenge/response dialog, when I entered the correct details, it simply displayed a dialog with an “OK” and “Cancel” button and the text “"You must change your password before logging on the first time.".
Trawling the Internet for some hints, I came across a thread on the MSDN Forums suggesting that the Security setting be changed to “RDP Security Layer” from “Negotiate”. Do do this you need to open the Terminal Services configuration, which can be done by executing the tsconfig.msc console.
Double click on the Connection:
..and you can change the default Security Layer (as shown).
This seems to only apply to Windows Server 2008, as I could not locate a similar application on Windows 7. It may be possible to run this console on Windows 7
In the end, it didn’t help my specific scenario (sorry), but I did like that it changed the authentication process. For my situation, I had someone clear the password change setting on the domain account in question, then happily logged on and changed the password manually.

