Exchange 2010 SP2 Not Allowing Logon for Users with Expired Passwords

Question

When we provision users we set the "User must change password at next logon" flag and instruct them to go to OWA to login for the first time and change their password. Using the registry setting ChangeExpiredPasswordEnabled as explained here:

http://technet.microsoft.com/en-us/library/bb684904.aspx

worked well prior to SP2 installation. This allows users with 'expired' passwords to logon and forces a password change before they can access OWA. We just installed Exchange 2010 Service Pack 2 and now it's no longer working. Users with this flag set ('expired' passwords) can't login in at all unless we clear the flag.

FYI here's the registry key configuration as set now with SP2 installed:

Any suggestions as to how I might fix this? Or did MS break this feature in Service Pack 2?

Answer 1

I found found that this works.

Log on to the Client Access Server
Click on Start, Run and type in regedit and click on OK
Expand HKEY_LOCAL_Machine
Expand System
Expand CurrentControlSet
Expand Services
Click on MSExchange OWA
Right-click on the right hand side pane, click on New  and then DWORD (32 bit) value
Let’s name the key ChangeExpiredPasswordEnabled and its value will be 1, 

Referance is here