There is such infrastructure. There is a gateway of RDP on the basis of Windows Server 2012, on the same server the server role of the network policies is set up. It is authorized to some users to enter far off on the Windows Pro 7 workstations through the client of RDP with the tuned gateway.
Problem in the following. If the password of the user expired, then it can't enter a session on the workstation. Also the message is displayed:
Your computer can't connect to the remote computer because your password has expired or you must change the password.
Further the user won't be able to work any more, without resorting to the help of the administrator. It isn't clear why the dialog box of change of the password isn't given after that as it happens at usually workstation.
I found that if in the register of HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp to change the Security-Tcp parameter with 1 on 0, then in case of local RDP connection the dialog box of change of the password will appear. However in case of access through the gateway, the same error message is still given.
Other methods I didn't find the solution of the arisen problem. Maybe somebody will advise something?