Hello,

I am trying to force the password change feature on Outlook Web App 2013 for my users, but it doesn't work for passwords expired by default through Group Policy. However, it works when I reset the users' password in AD and enable "User must change password at next logon". I have listed my environment below and the current settings. If anyone could share their thoughts, it would be great.

Environment: Exchange 2013 on Windows Server 2012

Settings: Value of "ChangeExpiredPasswordEnabled" in CAS 2013 is set to 1.

Password Policy: Expires for all the users in 42 days.

None of my users are on the domain, they access E-Mails on Outlook or Outlook Web App.

Thanks!  

Try to create a portal for the user password change http:// i-evgeny. blogspot .ru/2014/12/self-service-password-reset-web-site.html

Hi,

From your description, I recommend you follow the steps below for troubleshooting:

1. Please log on DC, open Group Policy Management, change the minimum password age to 0 on domain password policy.

2. On the CAS server, open IIS Manager.
Click Default Website ->  OWA -> double click Authentication -> double click Basic Authentication -> Edit -> set the default domain to "\".

3. Run iisreset /noforce command to restart IIS.

Hope this can be helpful to you.

Best regards,