1. User connects to the Windows Server 2016 RDSH server via RDP, and enters their expired password in RDP Windows Security prompt (not quite at the logon screen yet). 2. The RDP session brings up the Windows Server 2016 full logon window. 3. What is displayed is the logon screen saying "Other User", with a message stating:ALTER USER 'myuser'@'localhost' PASSWORD EXPIRE; For each connection that uses an account with an expired password, the server either disconnects the client or restricts the client to " sandbox mode, " in which the server permits the client to perform only those operations necessary to reset the expired password.
This article lays out the steps necessary to allow GlobalProtect to load system extensions when the message "The server certificate is invalid" is displayed.