Hi. I currently publish a couple of internet-facing CAS arrays, and have just enabled the ChangeExpiredPasswordEnabled key on the array members so that users can change a password at login if password is expired or if admin has checked the 'user must change password at next login' option on the user account in AD.
I've confirmed this isn't working in either of the following scenarios:
- through a TMG publishing rule
- directly an array member through a nat'ed address
Thus, it's not really a TMG problem, but seems to be affecting the CAS servers directly. I've issued 'iisreset /noforce' on the members as well. Is there anything else to do to make this work? Thanks in advance.