Have a Exchange 2010 SP2 RU4 v2 setup. Kemp load balancer to 2 CAS arrays to 2 mailbox servers in a DAG.
Configured both CAS servers to do password reset by adding a DWORD registry key HKLM\SYSTEM\CurrentControlSet\Services\MSExchange OWA\ChangeExpiredPasswordEnabled and setting it to 1. This was done a few months ago so servers have been thru a few restarts since then.
If a password has expired and a user attempts to log in, they are prompted to change the password. Once they do, they continue on to OWA. I've done it myself, so I know it works.
However, if a user has a password that is set to expire within our notification period (30 days as configured in AD), the password expiration notice does not appear in OWA. If the user logs on to a desktop within the 30 day period, they are informed their password will expire.
I've double checked the registry settings, and had a user bypass the load balancer and log in to OWA on the CAS arrays directly. Same result, they received no notification message.
Any suggestions? I seem to remember it working during our testing phase, but just heard from our help desk they aren't seeing it.
TIA,
Mike