Are you referring to being prompted to change the password when the user
accesses the IIS server?
I think that this is because the "next logon" that the setting refers to is
the next interactive logon, when the user does the typical CRTL-ALT-DEl
secure attention sequence. I don't believe that accessing web pages is
handled the same way.
I assume that the user is correctly prompted when logging in this way. Is
this correct?
Dale Weiss MCSA MCSE CISSP
PSS Security
This posting is provided "AS IS" with no warranties, and confers no rights.
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer. Use of included script samples are subject
to the terms
specified at http://www.microsoft.com/info/cpyright.htm
