Hi,
I have a Windows Server 2008 R2 Standard edition terminal server in which users are unable to change their password at next logon or if it has expired. The only way in which I can get this working is to change the RDP-Tcp security layer to 'RDP Security Layer'. I have tried changing this to 'negotiate' and set the encyrption level to 'Client Compatible' but this doesn't work either. Due to certain requirements, the RDP-Tcp settings need to be set so that the security layer is 'SSL (TLS 1.0)' or the 'Allow connections only from computers running Remote Desktop with Network Level Authentication' is ticked. Any advise would be most welcome.