I am using the PIX to perform extended authentication when remote users connect using the cisco VPN client. The PIX is configured to speak to a Windows 2000 DC running IAS. The user is then prompted for domain credentials before successful authentication. Is it possible for the remote user to change their domain password using the VPN client when it has expired?
Additionally is it also posible when an ACS server handles the authentication of a windows domain?
