Does dot1x External (AD) users can change password Without log in to domain desktop?

[prashantk]

Hi,

We have a wifi users in AD and we have set password in AD for them.

AD Users are authenticating through ISE RADIUS server.  

Now we want users should change their password on mobile at first login in wifi network without log in to the AD domain desktop (ie. abc.local).

My question is, does users can change their password on their mobile at first login when they are authenticating through ISE RADIUS server, but our main user source is AD (external source)?? (on dot1x)  

How I can achieve this?

regards,

Prashant

[ldanny · Accepted solution]

I havent tried this myslelf but seems to me it really comes down to mobile OS supporting this .
I would test this by marking an AD account to Change Password in next logon and give it a go.

[howon]

Like Danny mentioned, it depends on the OS supplicant capability. Last time I checked Windows and macOS works with password change, however, iOS devices and android (And chromebook) would not.