Expired Active Directory Password Change for Remote Users

Set up RADIUS authentication.
Create a RADIUS server profile. The server profile identifies the external authentication service and instructs the firewall on how to connect to the authentication service and access user credentials. For this setup, select
PEAP-MSCHAPv2
from the
Authentication Protocol
drop-down.
Create an authentication profile. The authentication profile identifies the server profile used for authentication on the GlobalProtect portal or gateway.
(
Optional
) Add a password change message. Password change messages allow you to specify password policies or requirements for your users (for example, passwords must contain at least one number and one uppercase letter).
Select
Network
GlobalProtect
Portals
.
Select a portal from the list to open the
GlobalProtect Portal Configuration
dialog.
On the
Agent
tab, select an existing agent from the list or
Add
a new one.
Select the
App
tab in the Configs dialog.
Under
App Configurations
, enter a
Change Password Message
(255 characters or less).
Click
OK
to save your GlobalProtect agent changes and return to the
GlobalProtect Portal Configuration
dialog.
Click
OK
to complete the configuration.
Commit
the configuration.