Consentire il cambio password al primo accesso RDP

Se un utente ha password scaduta o c'è impostato "Change password at first logon", di default in RDP non lo fa collegare.

Per far questo bisogna impostare questa reg key:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp]
"SecurityLayer"=dword:00000000
"UserAuthentication"=dword:00000000

che per UserAuthentication fa la stessa cosa di togliere la spunta dalla

System Properties / Advanced /Remote / Allow connections only from computer running Remote Desktop with Networ Leven Authentication (recommended)

Riferimenti

• Forced password change at next logon and RDP | Microsoft Security Solutions
• You must change your password before logging on for the first time (RDP) : r/sysadmin

• Disabling RDP Network Level Authentication (NLA) remotely via the registry – Fixing IT