Search code examples
asp.netactive-directoryforms-authentication

Forms authentication allows AD password expired users to login

I am having issue with Active Directory password expired users. They can login to application and access application though password is expired. When i try to run same code from local it give me Membership.ValidateUser as "false" ( pointing to same Active Directory)

Why there is diffference on Windows Server 2008 R2 IIS 7 and my Windows 7 IIS 7?

Is there any specific setting on IIS or AD i need to do? My application - VSTS 2010, ASP.NET 4.0, C# 4.0

Can anyone please help?

Solution

  • Windows Server 2008 R2 behavior is different. Somehow it allows though Change Password on Next logon is checked.

    Please share your experience.