Windows Remote Desktop Set Password
Microsoft Remote Desktop Change Password
Microsoft Remote Desktop Change Password Page
Microsoft Remote Desktop Change Password Mac

Windows Server 2016 RDP–You must change your password before logging on the first time

As I start to roll out Windows Server 2016 to replace Windows Server 2008 R2 RDP Servers, I’ve been encountering issues that just didn’t exist with Server 2008 R2. Today’s issue is that by default, if a new user account is created, or if the user’s password expires, or if an admin simply checks the Active Directory “User must change password at next login” property, when the user attempts to connect via RDP instead of getting a password change prompt they instead see this error:

Windows Remote Desktop Set Password

The problem: Our developer computers are in a complete independent network, to access our company network we can only use a VPN and a remote desktop client to a virtual Windows machine. Problem is i recently got a mac and needed to change my password in the remote desktop session, but every settings ui is currently blocked. Type the host name in the text box for Computer in the Remote Desktop Connection pop-up and click on Connect. Type the user name and current password. Once logged in to the VDI, click Ctrl+Alt+End buttons on the keyboard. The new screen will show the option to change the password. Click on Change Password and type the user name if it is for a. A remote password change option is available on the server with the Remote Desktop Web Access (RD Web Access) role, but it is disabled by default. To change a password, a script password.aspx is used, which is located in C: Windows Web RDWeb Pages en-US. Microsoft Remote Desktop. Use the Microsoft Remote Desktop app to connect to a remote PC or virtual apps and desktops made available by your admin. The app helps you be productive no matter where you are. Getting Started Configure your PC for remote access first. Download the Remote Desktop assistant to your PC and let it do the work for you.

Title: Remote Desktop Connection

You must change your password before logging on the first time. Please update your password or contact your system administrator or technical support.

This has the unusual effect of preventing the user from changing their password themselves, leaving the administrator with one of two undesirable options: Snipping tool won't copy and paste.

Microsoft Remote Desktop Change Password

Turn off the “User must change password at next login” property.
or
Change the password to some other password yourself, and also make sure that property is not set.

Microsoft Remote Desktop Change Password Page

In either case, the implication is that some person other than that user now knows what that user’s password.

Microsoft Remote Desktop Change Password Mac

How to solve the issue – Change the RDP Security Layer

To solve the issue, you have to edit the Session Collection, Security, Configure Security settings and then change the Security Layer setting from Auto-Negotiate to RDP Security Layer.

Once that change has been applied, remote RDP users return to being able to set a new password.

As an added bonus, this RDP Security Layer is actually more secure, and is also PCI Compliant (at least as of this writing anyway).