Dial-up password expiration and ACS 3.3

[myer.ramey]

I am using Windows Dial-up Networking for the client, connecting to a 3Com TotalControl box which can be configured for Radius authentication. In my lab I configured a Windows RAS server to point to ACS (Radius) for PPP authentication. My user account in ACS is set to force password change, but I am never prompted on the client to change password. When I try to dial-up again, I get "Error 691" and the corresponding log in ACS is "user must change password." Anyone have similar issues with the Microsoft DUN?

[peterson.dave]

where in acs did you find the force password change dialog box?

[myer.ramey]

Group Setup -> Password Aging Rules.

You may need to enable this feature by the following:

Interface Setup -> Advanced Options -> Group-Level Passord Aging

[myer.ramey]

Has anyone seen this issue? I have even tried installing the Cisco Authentication Agent on the laptop, but still am not prompted to change my password!!