Password Expired, But still able to login

hello all,

we facing issue particularly remote users, on field , travelling outside office months.

as per our password policy every users password expire in 90 days, these users though password expired, there lastlogon , lastloginstamp keeps on updating recent dates.

these remote users use ciscoanyconnect vpn connections. investigating how users account still active while not having reset password long. below example of users lastlogin recent

last logon           last logon timestamp           last password change
6/6/2016 5:37        6/6/2016 5:36                      3/2/2016 0:03
6/7/2016 4:38        6/7/2016 4:32                             2/29/2016 22:43
5/9/2016 2:09        4/27/2016 2:43                           1/18/2016 2:23
6/16/2016 23:42    6/16/2016 23:41                     12/23/2015 22:57

---

thanks ha

hi,
generally, windows cache account password on machine, if not actively connected domain, old password work. when connect domain, authentication not valid , they'll have pretty odd problems.
have checked whether these special users work without problems?
me, in case, run script on daily basis , create report of users , password expiration statistics, email users fall below threshold set. when user email, change password before expiring date. here proposed script regarding scenario, take , see if helps:
email users password expiring
https://community.spiceworks.com/scripts/show/125-email-users-that-their-password-is-expiring
please note: since web site not hosted microsoft, link may change without notice. microsoft not guarantee accuracy of information.
regards,
wendy

---

please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com.

Windows Server  >  Directory Services